Load / Install the Security Domain

When you install a Security Domain, you are associating your payShield to that domain. You can associate the payShield with the newly created Security Domain or you can add this payShield to an existing Security Domain of your choice.

Pre-requisites:

• The Smart Cards that make up the Security Domain

• 2 Smart Cards (that will function as a Left Key Card and a Right Key Card)

If you have these cards from a previously commissioned payShield, you may use them.

1. Expand the Install Existing Security Domain accordion.

   

2. Click Start.

3. Each security officer performs the following:

   1. Place their Smart Card in the reader.

      

      System prompts:

      

   2. Enter PIN.

   3. Click OK on the PIN pad. The system displays:

      

4. Remove card and click Next.

5. Repeat the steps above for security officer.

   As each officer enters their Smart Card, a key share is loaded into the domain.

   

6. When done, click Next.

   The system displays:

   

7. Click Next.

   The system displays:

   

   This certificate can then be imported into the browser to trust subsequent TLS connections to the commissioned payShield. Depending on your organization's IT policy, a PC administrator may be required to perform this configuration.

   If you do not need to download the certificate, continue to the section titled: Create Left and Right Remote Access Control key cards.

8. Click Download Certificate to download the certificate.

   The system displays:

   

   1. Insert your Smart Card.

   2. Enter your PIN and press OK.

      The system displays (example):

      

   3. Save your file to an appropriate location.

   4. Open the certificate for details.

      

      For additional data, open the Details tab and the Certification Path tab.

   5. Click Install Certificate.

      The Certificate Import Wizard opens.

   6. Follow the prompts.

   7. Click OK.