Firewall Settings - Entrust nShield Edge Installation Manual

Firewall settings

When setting up your firewall, you should ensure that the port settings are compatible with the HSMs
and allow access to the system components you are using.
The following table identifies the ports used by the nShield system components. All listed ports are the
default setting. Other ports may be defined during system configuration, according to the
requirements of your organization.
Default
Component
Port
Hardserver 9000
Hardserver 9001
Hardserver 9004
If you are using an nShield Edge as a Remote Operator slot for an HSM located elsewhere, you need
to open port 9004. You may restrict the IP addresses to the addresses you expect to use this port. You
can also restrict the IP addresses accepted by the hardserver in the configuration file. See the User
Guide for your module and operating system for more about configuration files.
N-018201-X
Use
Internal non-privileged connections from Java applications including
KeySafe
Internal privileged connections from Java applications including KeySafe
Incoming impath connections from other hardservers, eg:
From a non-attended host machine to an attended host machine when
l
using Remote Operator
nShield® Edge-Installation Guide
Chapter 4: Before you install the software
17