Enabling Or Disabling The System Card Requirement; Registering System Cards From A Card Reader; De-Registering A System Card - HP Brocade BladeSystem 4/12 User Manual

14
Smart card usage

Enabling or disabling the system card requirement

If you want to use a system card to control activation of an encryption engine on a switch, you must
enable the system card requirement. You can use the following procedure to enable or disable the
system card requirement.
1. From the Encryption Center select an encryption group, and select the Security menu.
2. Set System Cards to Required to require the use a system card to control activation of an
3. Click OK.

Registering system cards from a card reader

System cards are smart cards that can be used to control activation of encryption engines.
Encryption switches and blades have a card reader that enables the use of a system card. System
cards discourage theft of encryption switches or blades by requiring the use of a system card at the
switch or blade to enable the encryption engine. When the switch or blade is powered off, the
encryption engine will not work without first inserting a system card into its card reader. If someone
removes a switch or blade with the intent of accessing the encryption engine, it will function as an
ordinary FC switch or blade when it is powered up, but use of the encryption engine is denied.
To register a system card from a card reader, a smart card must physically available. System cards
can be registered during encryption group creation or member configuration when running the
configuration wizard, or they can be registered using the following procedure.
1. Select Configure > Encryption from the menu bar.
2. Select the switch from the Encryption Devices table, and select Switch > System Cards from
3. Insert a smart card into the card reader. Be sure to wait for the card serial number to appear,
4. Click OK.
5. Wait for the confirmation dialog box indicating initialization is done, and click OK.
6. Store the card in a secure location, not in the proximity of the switch or blade.

De-registering a system card

System cards can be removed from the database by de-registering them. Use the following
procedure to de-register a system card.
1. From the Register System Card dialog box, select the system card you want to de-register.
2. Click Deregister.
346
The Select Security Settings dialog is displayed.
encryption engine. If System Cards is set to Not Required, the encryption engine activates
without the need to read a system card first.
The Encryption Center dialog box displays.
the menu task bar, or right-click the switch or and select System Card.
The Register System Card dialog box is displayed.
and then enter card assignment information, as directed.
The card is added to the Registered System Cards table on the System Cards dialog box.
DCFM Professional User Manual
53-1001773-01