Cisco Cisco Web Security Appliance S170 사용자 가이드
80
I R O N P O R T A S Y N C O S 6 . 5 F O R W E B U S E R G U I D E
Restoring Certificates and Keys
When you back up the certificates and keys the HSM card manages, the keys are encrypted.
Because the keys are encrypted, they can only be restored on a different FIPS-compliant Web
Security appliance if the master key on the other appliance is the same as the one from which
the certificates and keys were backed up. Note that when the HSM card gets initialized, its
master key changes. For more information on copying the master key between appliances,
see “Working with Multiple HSM Cards” on page 83.
Because the keys are encrypted, they can only be restored on a different FIPS-compliant Web
Security appliance if the master key on the other appliance is the same as the one from which
the certificates and keys were backed up. Note that when the HSM card gets initialized, its
master key changes. For more information on copying the master key between appliances,
see “Working with Multiple HSM Cards” on page 83.
To restore a certificate and key pair stored in an XML file:
1. From the FIPS management console, click Edit Settings in the Key Management section.
The Edit Key Management Settings page displays.
2. Scroll down to the Restore Certificates and Keys section, and click Browse.
3. Navigate to the directory on the local machine where the XML file resides, and click
Open.
4. Click the check boxes for the certificate and key pairs you want to restore.
5. Click Restore.