Power Supply and Fan Maintenance
The two power supplies in the CipherTrust Manager k470 or k570 Appliance are hot-swap capable, meaning that one is sufficient to power the appliance while the other is removed and replaced, with no service interruption. The indicator light (LED) on each power supply shows different behavior, depending upon conditions.
Power Supply Condition | Power Supply LED |
---|---|
DC present/only standby output on | Flashing green (1Hz) |
Power supply DC output ON and OK | Steady green |
Power supply failure | Steady RED |
Power supply warning | Flashing Blue/Red (1Hz) alternating |
Input power failure (only in n+1 configuration) | Flashing Red (1Hz) |
A power supply controller in the appliance monitors the state of the power supplies. It ensures that a failed power supply still gets sufficient direct current from the remaining power supply to light the indicator LED. The controller also sounds an audible alarm when there is a problem, such as one power supply not being connected to AC main power.
If only one power supply is present, the audible alarm is silent. If you wish to operate your appliance with only one power supply, we recommend that you remove the second supply to silence the audible alarm.
Replacing a Power Supply
You may need to replace a power supply in the event of a failure.
To remove a power supply:
Face the rear panel of the appliance.
Disconnect/unplug the selected power supply.
Press the lever sideways to release the power supply retaining catch, and simultaneously pull the handle out toward you.
Withdraw the power supply completely, using your other hand to support the body of the power supply as it emerges.
To Reinstall a Power Supply:
To replace a power supply, reverse the steps above. Press firmly to seat the connector. The power supply can be fully inserted only in its proper orientation.
Connect an AC power cord.
The Fans
In normal operation, the fans should require no maintenance.
You might need to perform the following tasks:
Clean the filter (occasionally)
Replace a defective fan (rarely)
Cleaning the Filter
The ventilation grille, located to the right, on the appliance front panel, is secured in two parts, by two screws - a knurled, captive thumb-screw, and a Torx T8 screw. The knurled screw can be fastened or released without tools. It secures the lattice screen that in turn retains the mesh air filter.
While we recommend controlled-atmosphere environments for greatest longevity and reliability of the equipment, we recognize that some environments might include some dust in the air. The mesh filter traps larger particulate matter before it can be drawn into the interior of the appliance. In less-than-perfect non-clean-room conditions, the mesh might accumulate a buildup of dust, and should be cleaned occasionally for best cooling airflow into the equipment.
Note
Accessing the air filter mesh in front of the fans (using the thumbscrew to open the retaining grille) does not cause a tamper.
To clean the filter:
Twist the knurled knob counter-clockwise until it no longer secures the airflow lattice. The lattice is anchored at its left end by two tabs, and can be easily pulled off the appliance, once the retaining screw is loosened. Do so.
With the air filter exposed, it is easy to grasp the mesh with fingers and tug it free. The mesh is flexible and is held in its cavity only by friction. If it is dusty, handle carefully so as not to dislodge any dirt that could then be sucked in by the fans.
To clean the filter, either blow it out with compressed air (away from the vicinity of the appliance), or rinse with water. If using water, ensure that the mesh is dry before reinstalling.
To reinstall the mesh, place it in its cavity in front of the fans, and use fingers or a blunt tool to tuck-in the corners.
Then, replace the lattice in front of the mesh by inserting the tabs first, then swinging the lattice closed like a door, and securing with the knurled screw.
Replacing a Fan
The three fan modules (each containing two in-line fans) provide cooling redundancy.
If a fan fails, an ipmievd event is logged in /var/log/syslog
file accessible to the ksadmin
user with SSH access. As well these messages can be forwarded to an external syslog server or downloaded to an LTSV file along with other debug logs.
The following is an example event message:
Sep 8 18:00:23 ciphertrust ipmievd: Fan sensor PSU1 FAN_value . Lower Critical going low Asserted (Reading 0 < Threshold 1300 RPM)
To replace a fan
Power down the appliance. In an SSH session, login as
ksadmin
and issue the sudo reboot command.Open the fan bay. Use a Torx number 8 screwdriver to remove the screw that secures the right-side tab of the fan retainer.
The fan retainer is anchored at its left by two tabs - swing the retainer out like a door, and remove it. There is no need to separate the filter mesh and its retainer from the larger fan retainer; the assembly can come out as one piece. The illustration below happens to show them separated.
The fan modules are now exposed and are held in place only by the friction of their electrical connectors.
Grasp the handle of the selected fan module and pull straight out toward you.
After slight initial resistance, the fan module should easily slide free of the appliance.
To replace the fan module or install a new one, reverse the above sequence.
The index peg on the back of the module, and the matching index hole at the back of the fan bay, ensure that the module can be inserted only in its proper orientation.
Power on the appliance by pressing and releasing the START/STOP switch on the front panel.
Note
For k570s configured with local HSMs, if the appliance has been powered down for more than two hours, ksadmin
needs to reactivate the HSM partition (lunacm partition activate -partition <name_of_partition>
), so that they once more become available to your registered clients.
Additionally, if the HSM uses PED authentication, the PED credentials are no longer cached after two hours. In this case, after booting the system, disconnect and reconnect the PED USB cable, and re-authenticate with the HSM using the black PED key when prompted. With auto-activation enabled, the HSM re-caches the PED credentials. You can also configure remote PED access.