Nokia IP265 Security Guide - Page 28

VPN-1 version NGX R60 with Hotfix HFA-03. - installation guide

Page 28 highlights

Figure 4 - Tamper Seal Location(s) for PCMCIA Flash Memory Bay (a 1U Half-Width Chassis with 2 Seals shown in left picture; a 2U Chassis with 1 Seal shown in right picture) 3.1.1.2 Module Initialization Before performing the initial configuration, the Crypto Officer must set the boot manager password to prevent unauthorized access to the module hard disk. To initialize the appliance 1. Connect the supplied console cable to the local console port on the front panel of the appliance. 2. Connect the other end of the cable to the VT100 console, or a system running a terminal emulation program. 3. Press Return. 4. At the boot manager prompt, enter: BOOTMGR [0] > passwd 5. At the prompt, enter the new password. 6. At the prompt, re-enter the new password for verification. 7. IPSO can now be started by entering the boot command. 8. Follow the initial configuration procedures described in the appropriate Appliance Installation Guide. 3.1.2 Installing, Upgrading or Downgrading the Module Firmware New modules come preinstalled with the Nokia IPSO operating system and a version of the Check Point VPN-1 application. The current FIPS 140-2 conformant configuration consists of IPSO 4.1 and Check Point VPN-1 version NGX (R60) with Hotfix HFA-03. © Copyright 2005, 2006, 2007 Nokia Page 28 of 43 This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43

Figure 4 – Tamper Seal Location(s) for PCMCIA Flash Memory Bay (a 1U Half-Width
Chassis with 2 Seals shown in left picture; a 2U Chassis with 1 Seal shown in right
picture)
3.1.1.2
Module Initialization
Before performing the initial configuration, the Crypto Officer must set the
boot manager password to prevent unauthorized access to the module
hard disk.
To initialize the appliance
1.
Connect the supplied console cable to the local console port on the front
panel of the appliance.
2.
Connect the other end of the cable to the VT100 console, or a system
running a terminal emulation program.
3. Press Return.
4.
At the boot manager prompt, enter:
BOOTMGR [0] > passwd
5.
At the prompt, enter the new password.
6.
At the prompt, re-enter the new password for verification.
7.
IPSO can now be started by entering the boot command.
8.
Follow the initial configuration procedures described in the appropriate
Appliance Installation Guide
.
3.1.2
Installing, Upgrading or Downgrading the Module Firmware
New modules come preinstalled with the Nokia IPSO operating system
and a version of the Check Point VPN-1 application. The current FIPS
140-2 conformant configuration consists of IPSO 4.1 and Check Point
VPN-1 version NGX (R60) with Hotfix HFA-03.
© Copyright 2005, 2006, 2007
Nokia
Page 28 of 43
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.