Installing the ProtectServer Network HSM Hardware
Since the ProtectServer Network HSM is delivered with the necessary software pre-installed, no software installation is necessary on the unit itself.
After installation, confirm that the unit is operating correctly and configure the network settings. These steps are covered in Testing and Configuration.
To install the hardware
1.Choose a suitable location to site the equipment. You can mount the ProtectServer Network HSM in a standard 19-inch rack.
NOTE The power supply cord acts as the unit's disconnect device. The main outlet socket to which the unit is connected must be easily accessible.
2.Connect the ProtectServer Network HSM to the network by inserting standard Ethernet cables into the LAN connectors located on the unit's front face (labelled eth0 and eth1). The client machine(s) with SafeNet cryptographic API software installed should be hosted on the same network.
NOTE The ProtectServer Network HSM is equipped with two NICs (eth0 and eth1) incorporating an IPv4/IPv6 dual stack, allowing you to configure both an IPv4 and IPv6 address on each interface. If you intend to use both NICs, connect Ethernet cables to both LAN connectors.
3.Connect the power cable to the unit and a suitable power source. The ProtectServer Network HSM is equipped with an autosensing power supply that can accept 100-240V at 50-60Hz.
Smart Card Reader Installation
The unit supports the use of smart cards with a SafeNet-supplied smart card reader. Other smart card readers are not supported.
The ProtectServer Network HSM supports two different card readers:
>the new USB card reader (introduced in 5.2)
>the legacy card reader, which provides a serial interface for data (via a USB-to-serial cable) and a PS/2 interface for power (direct or via a PS/2 to USB adapter)
To install the USB card reader
Simply plug the card reader into the HSM USB port, as illustrated below.
Installing the legacy card reader
To install the smart card reader, connect it to the HSM USB port with the included USB-to-serial cable.
The legacy card reader must also be connected to a PS/2 port for its power. Many newer servers have USB ports, but do not provide a PS/2 connection.
If there is no available PS/2 connection, there are two options:
>Connect a PS/2-to-USB adapter (pink in the image below) between the card reader and a USB port on the ProtectServer Network HSM.
>If, for security reasons, you prefer to not expose USB ports on your crypto server, connect a PS/2-to-USB adapter cable between the card reader and a standalone powered USB hub. It should be noted that the USB connection is for power only. No data transfer occurs.
Next, see Testing and Configuration.
