Loadingbargain728

Luna PED 2 (Remote PED Capable and with firmware 2.5.0-3 or greater)

Luna PED Power Supply kit with replaceable mains plug modules for international use (for Remote PED operation)

Cable, USB 2.0, Type A to Mini B connectors (for Remote PED operation).

Cable, Data, 9-pin, Micro-D to Micro-D connectors (for local PED operation).

Ten-pack of ikey 1000 PED Keys, and sheets of peel-and-stick labels

Local OPERATION [Ongoing]

To use your HSM appliance and PED for local operation only, refer to the instructions accompanying your HSM, on the Luna SA documentation CD (begin by browsing the START_HERE.html page and selecting Help).

Local OPERATION [Preparing for Remote Use]

To prepare an HSM for Remote PED operation, it needs a minimum of preparation as described in this section, below.

[Preliminary] Copy the PED USB driver from /USBDriver folder on the Luna PED software CD (or in the archive [tar] if you received via download) to the workstation computer that will act as the PED server to your remotely located SafeNet HSM appliances and let the Windows “Found New Hardware” dialog install it).

Install PEDserver.exe software to any convenient directory on that same computer by copying it from the /Windows folder of the CD (or the archive [tar]).

[Preliminary] Configure your HSM appliance for your network. Refer to the other product documentation that you have received separately – in the form of WebHelp on the Luna SA documentation CD.

Imprint the HSM with a Remote PED Key (orange); see below. Once the appliance can be reached via SSH and the HSM is associated with an orange PED Key, all further configuration and administration can be performed remotely.

To use the PED locally (for first orange PED Key imprint), connect the PED directly to the PED port of the HSM that you will later be using remotely.

On power-up, the PED defaults to local mode. Follow the instructions in the SafeNet HSM documentation to:

• log in as “admin” to the appliance (SSH session or local serial connection)

• issue the Luna shell command “hsm ped vector init”, inserting a blank (orange-labeled) PED Key into the PED, when prompted OR inserting an already-imprinted orange PED Key and select “re-use” at the PED prompt

• bring the imprinted (orange) Remote PED Key to your workstation, along with a Remote-capable PED

• the HSM appliance can now be shipped to its remote locale

You can perform other maintenance at this time, if convenient, but only the foregoing steps were required to be done locally - all future configuration and administration can be performed remotely.

REMOTE OPERATION Perform the following steps to begin using your computer as a PED Server Workstation, connecting remotely to the distant HSM appliance.

[Prepare the PED Power Supply]

On the PED power supply, slide the release catch as shown by the heavy arrow, and lift the pin protector (thinner arrow) from the power supply.

The pin protector was used during shipment only.

Choose a plug style that is appropriate for your country and place it in the power supply, top end first, then snap the bottom end in the direction indicated by the arrow.

For Remote PED operation:

•connect the power supply to the AC mains,

•connect the DC power plug of the power supply to the DC power receptacle on the top of the PED,

•connect the USB cable between the USB micro connector on the PED and a USB socket on your computer.

At the workstation-connected PED:

•press [ < ] on the PED keypad to exit Local mode,

•press [ 7 ] to enter Remote PED mode.

In a command-prompt window on the workstation start the PEDserver program in its listening mode c:<yourRemotePED-dir>pedserver -m start

Run the command pedserver –m show to verify that the PED is detected, and the system is ready for remote connection.

Start the PED Client - the Remote PED enabling process on the appliance (for example):

lunash:> hsm ped connect -ip 192.2.12.16 - port 1503

The Remote PED Client in the HSM appliance connects with the listening PEDserver (your workstation).

When the PED prompts for an “rpk”, insert the imprinted Remote PED Key associated with the connecting HSM appliance, and press [Enter].

Verify the Remote PED connection by performing an HSM login - the luna shell refers you to the PED. The Remote PED at your workstation prompts you to insert the blue SO PED Key(s) and press [Enter].

A successful login confirms that the Remote PED connection is running properly.

Begin using and administering the remotely located SafeNet HSM appliance via ssh session, and providing PED Key authentication via the workstation-connected Remote PED, whenever requested. Review the Luna SA Help for information about timeouts with respect to Remote PED.