Entrust NShield 5s Bedienungsanleitung

nShield® 5s

Installation Guide

13.3

04 May 2023

Contents

1. Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê4

1.1. About this guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê4

2. Hardware security modules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê5

2.1. Electrical power requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê5

2.2. Handling modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê5

2.3. Module operational temperature and humidity specifications. . . . . . . . . . . . . . . . . . Ê5

2.4. Cooling requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê6

2.5. Physical location considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê7

3. Regulatory notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê8

3.1. FCCÊclass AÊnotice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê8

3.2. Canadian certification - CAN ICES-3 (A)/NMB- 3(A) . . . . . . . . . . . . . . . . . . . . . . . . . Ê8

3.3. Battery cautions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê8

3.4. Hazardous substance caution. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê8

3.5. Recycling and disposal information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê8

4. Before installing the module. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê9

4.1. Back panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê9

4.2. Module pre-installation steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê9

4.3. Fitting a module bracket . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê10

4.4. User Replaceable items . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê10

5. Installing the module. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê12

5.1. Fitting a smart card reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê12

5.2. After installing the module. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê12

6. Before you install the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê14

6.1. Preparatory tasks before installing software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê14

6.2. Firewall settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê18

7. Installing the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê20

7.1. Installing the Security World Software on Windows. . . . . . . . . . . . . . . . . . . . . . . . . . Ê20

7.2. Installing the Security World Software on Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê22

8. Setting the system clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê25

8.1. Setting the HSM system clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê25

9. Checking the installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê26

9.1. Checking operational status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê26

9.2. Log message types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê27

10. Status indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê30

10.1. Normal operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê30

10.2. Error indication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê30

Appendix A: Uninstalling existing software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê31

A.1. Uninstalling the Security World Software on Windows . . . . . . . . . . . . . . . . . . . . . . . Ê32

nShield® 5s Installation Guide 2 of 37

A.2. Uninstalling the Security World Software on Linux . . . . . . . . . . . . . . . . . . . . . . . . . . Ê32

Appendix B: Software packages on the Security World installation media . . . . . . . . . . . . Ê34

B.1. Security World installation media. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê34

B.2. Components required for particular functionality . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê35

B.3. nCipherKM JCA/JCE cryptographic service provider . . . . . . . . . . . . . . . . . . . . . . . . Ê36

B.4. SNMP monitoring agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Ê37

nShield® 5s Installation Guide 3 of 37

1. Introduction

The Entrust nShield nShield 5s is a Hardware Security Module (HSM) for servers and

appliances.

1.1. About this guide

This guide includes:

•Installing the nShield nShield 5s. See Installing the module.

•Installing the Security World Software. See Installing the software.

•Steps to check the installation. See Checking the installation.

•A description of the module status indicators. See Status indicators

•Instructions about removing existing software. See Uninstalling existing software.

See the User Guide for your module and operating system for more about, for example:

•Creating and managing a Security World

•Creating and using keys

•Card sets

•The advanced features of the nShield nShield 5s.

For information on integrating Entrust nShield products with third-party enterprise

applications, see https://www.entrust.com/digital-security/hsm.

1.1.1. Model numbers

Model numbering conventions are used to distinguish different nShield hardware security

devices.

Model number Used for

NC5536E-B nShield 5s Base

NC5536E-M nShield 5s Medium

NC5536E-H nShield 5s High

1.1.2. Terminology

The nShield nShield 5s is referred to as the nShield nShield 5s, the Hardware Security

Module, or the HSM in this guide.

nShield® 5s Installation Guide 4 of 37

2. Hardware security modules

2.1. Electrical power requirements

Module Maximum power

nShield 5s 25W

Make sure that the power supply in your computer is rated to supply

the required electric power.

The PCIe card, nShield 5s, is intended for installation into a certified personal computer,

server, or similar equipment.

If your computer can supply the required electric power and sufficient cooling, you can

install multiple modules in your computer.

2.2. Handling modules

The module contains solid-state devices that can withstand normal handling. However,

do not drop the module or expose it to excessive vibration.



Before installing hardware, you must disconnect your computer from

the power supply. Ensure that a grounded (earthed) contact remains.

Perform the installation with care, and follow all safety instructions in

this guide and from your computer manufacturer.

Static discharge can damage modules. Do not touch the module

connector pins, or the exposed area of the module.

Leave the module in its anti-static bag until you are ready to install it. Always wear an

anti-static wrist strap that is connected to a grounded metal object. You must also

ensure that the computer frame is grounded while you are installing or removing an

internal module.

2.3. Module operational temperature and humidity

specifications

The nShield 5s module operates within the following environmental conditions.

nShield® 5s Installation Guide 5 of 37

nShield 5s environmental

conditions

Operating range Comments

Min. Max.

Operating temperature* 5°C (41°F) 55°C (131°F) Subject to sufficient

airflow

Storage temperature -5°C (-23°F) 60°C (140°F) -

Transportation

temperature

-40°C (-40°F) 70°C (158°F) -

Operating humidity 5% 85% Relative. Non-condensing

at 30°C (86°F)

Storage humidity 5% 93% Relative. Non-condensing

at 30°C (86°F)

Transportation humidity 5% 93% Relative. Non-condensing

at 30°C (86°F)

Altitude -100m (-328ft) 2000m (6561ft) Above Mean Sea Level

*Air temperature at PCIe card inlet surface. For more information, see Cooling

requirements.



The module is designed to operate in moderate climates only. Never

operate the module in dusty, damp, or excessively hot conditions.

Never install, store, or operate the module at locations where it may be

subject to dripping or splashing liquids.

2.4. Cooling requirements

An air velocity of 1.9 m/s (373 LFM) is recommended for a module in

operation.

During installation, ensure there is adequate airflow around the module. Airflow from fans

must be directed to the inlet surface of the module such that air is flowing through and

across the length of the module. To maximize airflow, use a PCIe slot with no neighboring

modules if possible. If airflow is limited, consider fitting extra cooling fans.

The nShield 5s module is a passively cooled PCIe card that requires the

host to provide sufficient airflow for cooling. Passive cards should not

be powered without cooling airflow in place.

nShield® 5s Installation Guide 6 of 37

Ensure the module has adequate cooling. Failure to do so can result in

damage to the module or computer.

To check the actual and maximum temperature of the module during operation, see the

Maintenance of nShield Hardware section of the User Guide for your module and

operating system. It is advised to do this directly after installing the module in its normal

working environment. Monitor the temperature of the module over its first few days of

operation.

2.4.1. Cooling recommendations for a desktop installation

For a desktop installation running in operating environmental conditions, dedicated

airflow is required across the module. If the system cannot provide the necessary airflow,

Entrust recommends you add a sufficiently powerful dedicated fan to directly cool the

module. For details regarding the cooling requirements see Cooling requirements.

2.4.2. Cooling recommendations for a server installation

The desktop cooling recommendations further apply to a server installation. In addition,

power and airflow control software is sometimes available in a server installation. If this is

the case, Entrust recommends you:

•Configure the target air velocity in the software to ensure it does not fall below the

airflow recommendations of the module. For details regarding the cooling

requirements, see Cooling requirements.

•Ensure that the PCIe slot has been configured to fulfil the module power

requirements.

2.5. Physical location considerations

For the certification of Entrust nShield HSM, refer to the Security Manual. In addition to

the intrinsic protection provided by an nShield HSM, customers must exercise due

diligence to ensure that the environment within which the nShield HSMs are deployed is

configured properly and is regularly examined as part of a comprehensive risk mitigation

program to assess both logical and physical threats. Applications running in the

environment shall be authenticated to ensure their legitimacy and to thwart possible

proliferation of malware that could infiltrate these as they access the HSMs’

cryptographic services. The deployed environment must adopt 'defense in depth'

measures and carefully consider the physical location to prevent detection of

electromagnetic emanations that might otherwise inadvertently disclose cryptographic

material.

nShield® 5s Installation Guide 7 of 37

3. Regulatory notices

3.1. FCCÊclass AÊnotice

The nShield nShield 5s HSMs comply with Part 15 of the FCC rules. Operation is subject

to the following two conditions:

1. The device may not cause harmful interference, and

2. The device must accept any interference received, including interference that may

cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class A digital

device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide

reasonable protection against harmful interference when the equipment is operated in a

commercial environment. This equipment generates, uses, and can radiate radio

frequency energy and, if not installed and used in accordance with the instruction

manual, may cause harmful interference to radio communications. Operation of this

equipment in a residential area is likely to cause harmful interference in which case the

users will be required to correct the interference at their own expense.

3.2. Canadian certification - CAN ICES-3 (A)/NMB- 3(A)

3.3. Battery cautions

Danger of explosion if the battery is incorrectly replaced. The battery may only be

replaced with the same or equivalent type. Dispose of the used battery in accordance

with your local disposal instructions.

3.4. Hazardous substance caution

This product contains a lithium battery and other electronic components and materials

which may contain hazardous substances. However, this product is not hazardous

providing it is used in the manner in which it is intended to be used.

3.5. Recycling and disposal information

For recycling and disposal guidance, see the nShield product’s Warnings and Cautions

documentation.

nShield® 5s Installation Guide 8 of 37

4. Before installing the module

4.1. Back panel

Label Description

A Status LED

B Recovery mode button

C A mini-DIN connector for connecting a smart card reader.

4.2. Module pre-installation steps

Check the module to ensure that there is no sign of damage or tampering:

•Check the epoxy resin security coating for obvious signs of damage.

•If you intend to install the module with an external smart card reader, check the

cable for signs of tampering. If evidence of tampering is present, do not use and

request a new cable.

nShield® 5s Installation Guide 9 of 37

4.3. Fitting a module bracket

Before installing a module in a PCI Express card slot, you may have to replace the

bracket if it is not the same height as the slot. Both full height and low profile brackets

are supplied with the module.

Do not touch the connector pins, or the exposed area of the module without taking

electrostatic discharge (ESD) precautions.

To fit the bracket to the module:

1. Remove the two screws from the solder side of the module.

2. Remove the incorrect bracket.

3. Fit the correct bracket to the component side of the module.

4. Insert the two screws into the solder side of the module to secure the bracket. Do

not over tighten the screws.

4.4. User Replaceable items

If the module has been removed so that a part can be replaced, follow these procedures

before installing the module. If no parts need replacing, proceed to Installing the module.

nShield® 5s Installation Guide 10 of 37

Inhaltsverzeichnis

Andere Entrust Steuereinheit Handbücher

Entrust

Entrust nShield Solo Bedienungsanleitung

Entrust

Entrust nShield Bedienungsanleitung

Entrust

Entrust nShield Bedienungsanleitung

Entrust

Entrust Sigma DS4 Bedienungsanleitung

Entrust

Entrust nShield Edge Bedienungsanleitung

Beliebte Steuereinheit Handbücher anderer Marken

Festo

Festo Compact Performance CP-FB6-E Stücklistenhandbuch

Elo TouchSystems

Elo TouchSystems DMS-SA19P-EXTME Bedienungsanleitung

JS Automation

JS Automation MPC3034A Bedienungsanleitung

JAUDT

JAUDT SW GII 6406 Series Kurzanleitung

Spektrum

Spektrum Air Module System Bedienungsanleitung

BOC Edwards

BOC Edwards Q Series Bedienungsanleitung

KHADAS

KHADAS BT Magic Bedienungsanleitung

Etherma

Etherma eNEXHO-IL Bedienungsanleitung

PMFoundations

PMFoundations Attenuverter Bedienungsanleitung

GEA

GEA VARIVENT Bedienungsanleitung

Walther Systemtechnik

Walther Systemtechnik VMS-05 Bedienungsanleitung

Altronix

Altronix LINQ8PD Montageanleitung

Eaton

Eaton Powerware Series Bedienungsanleitung

WAGO

WAGO 750-407/040-000 Bedienungsanleitung

Sony

Sony CCU-590 Bedienungsanleitung

Graco

Graco 25D614 Bedienungsanleitung

Task Force Tips

Task Force Tips YE-RF-900 Programmierhandbuch

Shini

Shini SPV-U Series Bedienungsanleitung

Entrust nShield 5s Bedienungsanleitung

Beliebte Steuereinheit Handbücher anderer Marken