Operational tasks

This chapter describes some of the most common operational procedures a User, Administrator or Security Officer can perform during normal ProtectToolkit-C operation.

Before attempting any of the procedures in this chapter, ensure that ProtectToolkit-C has been installed and configured for normal runtime use. You can find more information about the frequently-referenced command line utilities in Command-line utilities reference. Many of these functions can also be achieved with the GUI-based tools. For more information about using the GUI-based tools, see Key Management Utility (KMU) Reference and Administration Utility (gCTAdmin) reference.

This chapter contains the following sections:

• Changing a User or Security Officer PIN

• Secure key backup and restoration

• Adding and removing slots

• Re-initializing a token

• Multifactor authentication (one-time password)

• Connecting and removing smart card readers

• Using Transport Mode to avoid a board removal tamper

• Adjusting the HSM clock

• Changing secure messaging mode

• Using the system event log

• Updating the HSM firmware or boot loader

• Installing a functionality module

• Key entry via PIN pad

• Resetting the HSM to factory settings

• Resetting the ProtectServer 3 Network HSM appliance to factory settings

• Tampering or decommissioning the HSM

• RMA and shipping back to Thales