Home > |
---|
This chapter describes basic configuration of the HSM appliance as a networked appliance - standard setup tasks that must be accomplished before you can configure the HSM or make Client connections. You will:
•Gather Information (next topic)
•Switch On (next page)
•Open a Connection
CAUTION: In
general, we recommend against using DHCP for HSM appliances. DHCP has its own set of inherent security risks (spoofing attacks, etc), and a SafeNet Network HSM (or any critical server) either should not be used in that manner, or must be managed with the greatest of care. It would be comparable to having a firewall with a DHCP address. Consider what might happen if a SafeNet Network HSM appliance rebooted and came back with a different address. It would cause considerable disruption to client applications.
It is possible to assign "static" IP by instructing a router to always assign specific reserved IP addresses to specific appliance MAC addresses, but it is also possible that a reset router could "forget" those assignments. The safer approach is a manually set static IP at the appliance, that remains effective as long as the appliance is healthy.
Note: As shipped from the factory, we leave the HSM appliance configured for DHCP. This setting is a side-effect of our manufacturing and final-test process where we need the ability to configure multiple HSM appliances at one time on a DHCP-based network and not have to be constrained by fixed IP addresses.
Go to Configure Your Network Settings.