Sign In
Upload
Manuals
Brands
Thales Manuals
Security System
V6100
Thales V6100 Manuals
Manuals and User Guides for Thales V6100. We have
1
Thales V6100 manual available for free PDF download: Installation And Configuration Manual
Thales V6100 Installation And Configuration Manual (181 pages)
Data Security Manager
Brand:
Thales
| Category:
Security System
| Size: 3 MB
Table of Contents
Table of Contents
3
Assumptions
13
Documentation Version History
13
DSM Hypervisor Support
13
Preface
13
Document Conventions
14
Typographical Conventions
14
Notes, Tips, Cautions, and Warnings
14
Hardware-Related Warnings
15
Sales and Support
15
Chapter 1: The Data Security Manager
16
DSM Overview
16
Ipmi
17
DSM Deployment
17
Chapter 2: DSM V6100 Hardware Appliance
19
DSM V6100 Overview
19
Remote HSM Administration
19
Advantages
19
Requirements
20
Administrator Card Set (ACS)
20
Security World
20
Acs
21
ACS Guidelines
21
V6100 Operations that Require the ACS
22
Configuring a V6100 Appliance
23
Configuring DSM with DHCP
23
Configure Appliance with DHCP Enabled
24
Configuring a DSM V6100 Via Static IP Address
24
Configure Appliance with Static IP Address Enabled
25
Assumptions
25
DSM Installation Checklist
25
Pre-Configuration Tasks
27
Specify Host Name Resolution Method
27
Improving DNS Performance
27
Configure DSM Ports
28
Configuration Tasks
28
Connect to the V6100 Appliance
29
Access the DSM Command Line Interface (CLI)
29
Configure Network Settings
30
Configure a Bonded NIC Device
32
Bonding Driver Modes
33
Enable DHCP on Bond0 Interface
34
Configure NTP, Time Zone, Date, Time
34
Configure the Hostname
35
Generate DSM Certificate Authority and Create ACS
35
Configuring IPMI
38
Verify Web Access
39
Upload a License File
40
Enable Remote Administration
40
Add more CLI Administrators (Optional)
41
Full Disk Encryption
41
Set Boot Passphrase
41
Recovering a Lost Passphrase
43
Configuring IPMI
45
IPMI Ports
45
Configuring IPMI on the DSM
45
Configuring High Availability for V6100
46
Chapter 3: DSM V6000 Hardware Appliance
47
Overview
47
Configuring a V6000 Appliance
47
Configuring the DSM Via DHCP
47
Configuring DSM with DHCP
47
Configure Appliance with DHCP Enabled
48
Configuring a DSM V6000 Via Static IP Addressing
48
Configuring a DSM V6100 Via Static IP Address
48
Configure Appliance with Static IP Address Enabled
49
Assumptions
49
DSM Installation Checklist
49
Pre-Configuration Tasks
51
Specify Host Name Resolution Method
51
Configure DSM Ports
51
Configuration Tasks
51
Connect to the V6000 Appliance
51
Access the DSM Command Line Interface (CLI)
52
Configure Network Settings
53
Configure a Bonded NIC Device
54
Bonding Driver Modes
56
Enable DHCP on Bond0 Interface
57
Configure NTP, Time Zone, Date, Time
57
Configure the Hostname
58
Generate DSM Certificate Authority and Create ACS
58
Configuring IPMI
61
Verify Web Access
62
Upload a License File
63
Add more CLI Administrators (Optional)
63
Full Disk Encryption
63
Nshield Connect Integration
64
Deployment
64
High Availability
65
System and Software Requirements
65
Configuring Nshield Connect HSM with DSM
65
Configure Nshield Connect Appliance and Associated RFS
66
Add DSM as an Nshield Connect Client
66
Add the Nshield Connect HSM to the DSM
66
Configuring High Availability for Network HSM-Enabled DSM
67
Managing Network HSM-Enabled DSM
67
Backing up and Restoring Network HSM-Enabled DSM
68
Updating a Network HSM-Enabled DSM Security World
69
High Availability (HA) Configuration for V6000 Hardware Appliance
69
Chapter 4: Installing and Configuring a DSM
70
Overview
70
Assumptions
71
Virtual Machine Hardware Requirements
71
Configuring a Virtual Appliance
72
Configuring DSM Using DHCP
72
Configuring DSM Using Static IP Addressing
72
Virtual DSM Installation Checklist
73
Pre-Configuration Tasks
74
Specify Host Name Resolution Method
75
Configure Ports
75
Access the Command Line Interface (CLI)
75
Virtual Appliance Setup
76
Disk Re-Encryption for DSM Fastboot Image
77
Disk Re-Encryption after Initial Setup
78
Virtual Appliance Configuration
78
Configure Network Settings
78
Configure a Bonded NIC Device
80
Bonding Driver Modes
81
Enable DHCP on Bond0 Interface
82
Configure NTP, Time Zone, Date, Time
82
Configure the Hostname
83
Generate DSM Certificate Authority and Create ACS
83
Verify Web Access
86
Upload a License File
86
Full Disk Encryption
87
Nshield Connect Integration
87
DSM Installation on Bare Metal Using IBM Cloud
87
Upload the DSM ISO Image to the IBM Cloud NAS Storage
87
Configure Virtual DSM in IBM Cloud
88
DSM Installation on Hyper-V
90
Deploying a DSM Azure Image
91
Requirements
91
Deployment Procedure
91
Configure the Hostname
92
Generating the CA
93
Pinging the DSM in Azure
93
Enabling Ping
94
Configuring an HA Cluster
94
Deploying a DSM AWS Image
94
Requirements
94
Installing DSM
94
Configuring HA
96
Deploying a DSM in the Google Cloud Platform
96
Obtain the DSM Image for GCP Deployment
96
Upload DSM Image to GCP Storage
97
Access the GCP
97
Create a GCP Storage Bucket
97
Upload the DSM Image to the GCP Storage Bucket
97
Create a GCP Image
97
Creating a GCP Instance of DSM
98
Deploying a DSM to GCP through the GCP CLI
98
Uploading the DSM Tar File to GCP Bucket
98
Create the GCP Image-CLI
98
Create the GCP Instance in the CLI
99
KVM Deployment
99
Virt-Manager
99
Virsh
99
Deploying on a Xen Hypervisor
100
Virt-Manager
100
Virsh
100
High Availability (HA) Configuration for Virtual Appliances
101
Luna SA HSM
102
Luna Compatibility
102
Add a Luna SA HSM to an HA Cluster
103
Configuring an HA Cluster with a Luna SA HSM
103
Configure for Redundancy and Load Balancing
103
Creating a Partition on the Password-Authenticated Luna
104
Creating a Partition on the PED-Authenticated Luna
105
Backup Your Configuration
106
Break Apart the Cluster
106
Add a Luna to the Initial Node of the HA Cluster
106
Verifying the Luna Status
107
Add DSM Nodes to a Luna-Enabled HA Cluster
108
Join a (Missing or Bad Snippet) Node to an HA Cluster
109
Monitoring the Luna
110
HSM Slots
110
Upgrading a DSM Attached to a Luna
111
Registering Again
111
On the DSM
111
On the Luna
111
Troubleshooting
112
Partitions
112
Logs
112
Chapter 6: Upgrade and Migration
113
Overview
113
Supported Upgrade Paths
113
Migrating from DSM V6.1.0.9229 to DSM 6.4.2
114
Best Practices for Migration
114
Prerequisites
115
Break up the HA Cluster
115
Delete Idle Software
115
Backup Current DSM Configuration
115
Upgrading the DSM
116
Upgrading a Single Node Deployment
116
Upgrade Server Software
116
Enable DHCP
116
Migrating from V5 Appliances to V6X00 Appliances
117
Restore Backup
117
Migrating from V5 Appliances to V6X00 Appliance (KMIP)
118
Enabling Remote Administration for Upgraded V6100 Appliances
118
Requirements for Remote HSM Administration
118
Obtain a Warrant
118
Replacing the ACS
120
ACS Replacement Guidelines
120
Enabling Remote Administration for an HA Configuration
122
Appendix A: Specifications, Racking, and Cabling for the V6000 and V6100
123
Hardware Appliance Diagrams
123
Control Panel Leds
124
DSM Appliance Features
124
Informational Leds
125
DSM Hardware Appliance Specifications
125
Space, Network, and Power Requirements
126
Physical Dimensions
126
External Connectors
126
Power Requirements
126
Data Center Environmental Requirements
126
Appliance Rack Mount Safety Instructions
126
Rack Mounting the Appliance
127
Unpacking the System
127
Preparing for Setup
127
Choosing a Setup Location
127
Rack Precautions
127
General Server Precautions
128
Rack Mounting Considerations
128
Rack Mounting Instructions
129
Identifying the Sections of the Rack Rails
129
Locking Tabs
130
The Inner Rail Extension (Optional)
131
Installing the Inner Rails
131
Outer Rack Rails
132
Installing the Chassis into a Rack
133
Installing the Chassis into a MID-Mount Position (Telco) Rack
133
Installing and Connecting Cables
134
Applying Power
134
Connecting the Serial Console
134
Connecting to the Network
135
Appendix B: HA for V6X00 and Virtual Appliances
136
HA Overview
136
Supported HA Deployments
136
V6100
136
V6000 and Virtual Appliances
136
Configuring HA for V6X00 and Virtual Appliances
136
Prerequisites
137
Network Latency
137
Configuring the Hardware
137
Adding Nodes to an HA Cluster
138
Join a Node to an HA Cluster
138
Configuring High Availability for Network HSM-Enabled Nodes
140
Configure HA with Standalone Nodes
140
Configure an HA Cluster with HSM-Enabled Nodes
141
Adding a Host to a New HA Node
142
Upgrading an HA Cluster
143
Prerequisite
143
Remove Nodes from the HA Cluster
143
Upgrade the Initial HA Node
144
Optimize the Upgrading of Nodes in the HA Cluster
144
Deleting a Node from a Cluster
144
Deleting a Node from a Cluster with no Hosts Assigned
144
Deleting a Node from a Cluster with Hosts Assigned
145
Moving a Host to a Different Node with the CLI
145
Moving a Host to a Different Node with the UI
145
Appendix C: IPMI
147
IPMI Overview
147
Configuring and Accessing IPMI on the DSM
147
Configuring IPMI on the DSM
148
Configuring IPMI Network Settings
149
Configuring Date and Time Settings with NTP Enabled
150
Configuring Date and Time Settings with NTP Disabled
150
Configuring Users Settings
150
Configuring IPMI GUI Port Settings
151
Configuring Fan Settings
152
Remote Control
152
Console Redirection
152
Power Control
153
Using Active Directory with IPMI GUI
153
Configuring AD Groups
153
Configuring the AD Server
153
Configuring LDAP Server
154
Configuring LDAP Settings on IPMI
154
Maintenance Firmware Update
155
Prerequisite
155
Upgrading the Firmware
155
Reset the Firmware
155
Restore the IPMI Configuration from a Backup File
156
Server Health
156
Best Practices after IPMI Is Configured
157
Replace the Default Certificate with a Web Server Certificate
157
Change the Port through Which You Access IPMI
158
Change the IPMI Password
159
Creating IPMI Users
159
To Create an IPMI User
159
Configuring Alerts
160
Configure SMTP (Optional - for E-Mail Alerts)
160
Configure an IPMI Alert (for SMTP And/Or SNMP Alerts)
160
Restrict Inbound Traffic to IPMI through IP Access Control
161
Reset Default Configuration Settings
161
DSM IPMI CLI Commands
162
Ip Set
163
Ip Delete
163
Ip Show
163
Mask
164
Mask Set
164
Mask Delete
164
Mask Show
164
Gateway
164
Gateway Set
165
Gateway Delete
165
Gateway Show
165
Dhcp
165
Disable
166
Port
166
Enable
166
Status
167
User
167
User Add
167
User Password
168
User Delete
168
User Show
168
User Level
168
Clearint
169
Psinfo
169
Reset
170
Factorydefault
170
Reset Bmc
170
Selftest
171
Version
171
Appendix D: Ports
172
Ports to Configure
172
IPMI Ports
173
Appendix E: Bonding Driver Modes
174
Appendix F: Troubleshooting
175
Loss of Connection
175
Is the Management Console Accessible
175
Check Whether Agent Communication Ports Are Open from the UI
175
Reset DSM Appliance and Remove All Data
175
Reset Original Security World with Original ACS Quorum
175
Regenerating the DSM Certificate Authority
176
Create New Security World with New ACS
177
Chassis Issues
179
Indicator Definitions
180
Advertisement
Advertisement
Related Products
Thales V6000
Thales VesseLINK
Thales VesseLINK VF350BM
Thales VesseLINK Certus 200
Thales Datacryptor Ethernet
Thales SafeNet Luna Network HSM 7.3
Thales SafeNet Luna Network HSM 7.4
Thales SafeNet ProtectServer Network HSM Plus 5.8
Thales Categories
GPS
Network Hardware
Turntable
Server
Security System
More Thales Manuals
Login
Sign In
OR
Sign in with Facebook
Sign in with Google
Upload manual
Upload from disk
Upload from URL