Entrust nShield 5c Installation Manual page 51

making any changes you are prompted to restart the hardserver.
config-serverstartup
Run
config-serverstartup [OPTIONS]
For more information about the options available to use with config-serverstartup, run
the command:
config-serverstartup --help
9.3.2. Configuring a client to communicate through an nToken
You can configure a client to use its nToken to communicate with an nShield nShield 5c,
if it has one installed. When this happens, the nShield nShield 5c:
• Examines the IP address of the client.
• Requires the client to identify itself using a signing key.
If an nToken is installed in a client, it can be used to both generate and
protect a key that is then used for the impath communication between

the nShield nShield 5c and the client. A strongly protected key is used
at both ends of the impath as a result.
9.3.3. Enrolling the client from the command line
Complete the following steps to initially configure a client computer to communicate
with and use an nShield nShield 5c. See
about the available options.
Do the following:
1. On the client, open a command line window, and run the command:
nethsmenroll --help
2. To retrieve the
anonkneti <Unit IP>
The following is an example of the output:
3138-147F-2D64 691be427bb125f38768638a18bfd2eab75623320
nShield® 5c Installation Guide
using the following commands:
ESN HKNETI
and of the nShield nShield 5c, run the command:
Basic HSM, RFS and client configuration for more
51 of 77