Cisco Cisco Email Security Appliance C690 User Guide

Page of 570
 
1-15
Cisco IronPort AsyncOS 7.3 for Email Advanced Configuration Guide
OL-23081-01
Chapter 1      FIPS Management
  •
Initialize the HSM card.
  •
Read the HSM card status.
  •
Configure the certificates and keys for services on the Email Security 
appliance.
  •
Configure keys for DKIM and DomainKeys.
  •
Configure multiple HSM cards to use the same master key.
  •
Change the FIPS password.
  •
Backup and restore critical security parameters.
When you enter 
fipsconfig
 at the command line, the CLI prompts you to enter 
the FIPS Officer password. For more information, see 
 describes the 
fipsconfig
 subcommands. 
Table 1-1
fipsconfig Subcommands 
fipsconfig 
Subcommand
Description
init
Initializes the card and reboots the Email Security 
appliance. 
For more information, see 
.
Note: Some SSH clients automatically lose the SSH 
connection when the HSM initializes or when the 
wrong password is entered 3 times. In this case, the 
administrator must manually reboot the appliance by 
powering off and on. 
getinfo
Displays the HSM card status.