Table of Contents
Advertisement
4. Initialize HSM card 1 by inserting the second pair of HSM-SO and HSM-USER
User Guide
inserting an HSM iKey, a flashing LED will direct you to the USB port on the correct
HSM card.
(joinsetup, continued)
Verify that HSM-SO iKey (purple) is inserted in card 0 (with
flashing LED).<insert the HSM-SO iKey specific for this HSM card>
Hit enter when done.
Enter a new HSM-SO password for card 0:<define an HSM-SO password>
Re-enter to confirm:
The HSM-SO iKey has been updated.
Verify that HSM-USER iKey (blue) is inserted in card 0 (with
flashing LED).<insert the HSM-USER iKey specific for this HSM
card>
Hit enter when done.
Enter a new HSM-USER password for card 0:<define an HSM-USER
password>
Re-enter to confirm:
The HSM-USER iKey has been updated.
Card 0 successfully initialized.
Note:
For more information about iKeys, see
page 33.
iKeys, and by defining passwords.
Remember to take steps to label each pair of HSM-SO and HSM-USER iKeys and
the HSM card to which each set of iKeys is associated during the initialization.
Because each ASA 310-FIPS ASA 310-FIPS device in the cluster will have two
HSM cards, you must also take steps to identify to which ASA 310-FIPS device
each pair of iKeys are associated. Your labeling must ensure that the connection is
obvious between a pair of HSM-SO/HSM-USER iKeys, the HSM card that was
initialized by using those iKeys, and the ASA 310-FIPS device holding that particular
HSM card.
(joinsetup, continued)
Verify that HSM-SO iKey (purple) is inserted in card 1 (with
flashing LED).<insert the HSM-SO iKey specific for this HSM card>
Hit enter when done.
Enter a new HSM-SO password for card 1:<define a new HSM-SO
password, or use the same HSM-SO password as for card 0>
Re-enter to confirm:
The HSM-SO iKey has been updated.
Verify that HSM-USER iKey (blue) is inserted in card 1 (with
Installing an ASA 310-FIPS
The Concept of iKey Authentication
on
April 2013
63
Advertisement
Table of Contents
