config system nethsm

Configure system nethsm.

config system nethsm
    Description: Configure system nethsm.
    set status [enable|disable]
    set vendor {option}
    set interface {string}
    set receivetimeout {integer}
    config servers
        Description: NetHSM server list.
        edit <name>
            set server {string}
            set port {integer}
            set server-cert {user}
            set htl [enable|disable]
        next
    end
    config slots
        Description: NetHSM slot list.
        edit <name>
            set id {integer}
            set password {password}
            set for-ha [yes|no]
        next
    end
    set ha [enable|disable]
    set ha-status-pulling-interval {integer}
    config hagroups
        Description: NetHSM HA group list.
        edit <name>
            set member <name1>, <name2>, ...
        next
    end
    set rsa-mech-remap [enable|disable]
end

config system nethsm

Parameter	Description	Type	Size	Default
status	Status.	option	-	disable
	Option Description enable Enable system network HSM. disable Disable system network HSM.
vendor	Vendor.	option	-	SafeNet
	Option Description SafeNet SafeNet
interface	Outgoing interface	string	Maximum length: 15
receivetimeout	Receive timeout, specified in ms.	integer	Minimum value: 0 Maximum value: 4294967295	20000
ha	HA option.	option	-	disable
	Option Description enable Enable HA. disable Disable HA.
ha-status-pulling-interval	Interval to pull HA status in minutes.	integer	Minimum value: 0 Maximum value: 60	1
rsa-mech-remap	RSA Mechanism Remap option. Enable it if Luna server is running in FIPS mode and firmware version is 6.22.* or greater.	option	-	disable
	Option Description enable Enable RSA Mechanism Remap. disable Disable RSA Mechanism Remap.

config servers

Parameter	Description	Type	Size	Default
name	NetHSM server name.	string	Maximum length: 35
server	{<name_str|ip_str>} NetHSM server domain name or IP.	string	Maximum length: 63
port	NetHSM server port.	integer	Minimum value: 1 Maximum value: 65535	1792
server-cert	NetHSM server certificate.	user	Not Specified
htl	HTL option.	option	-	disable
	Option Description enable Enable HTL. disable Disable HTL.

config slots

Parameter	Description	Type	Size	Default
name	NetHSM slot name.	string	Maximum length: 35
id	NetHSM slot ID.	integer	Minimum value: 0 Maximum value: 4294967295	0
password	NetHSM slot access password.	password	Not Specified
for-ha	HA option.	option	-	no
	Option Description yes HA slot. no Regular slot.

config hagroups

Parameter	Description	Type	Size	Default
name	NetHSM HA group name.	string	Maximum length: 35
member <name>	HA group members. NetHSM HA group member (slot names).	string	Maximum length: 79