ssl-fipsSIMTarget
The following operations can be performed on "ssl-fipsSIMTarget":
enable ssl fipsSIMTarget
Enables secure transfer of FIPS keys in a high availability setup from the primary appliance to the secondary appliance.
Synopsis
enable ssl fipsSIMTarget <keyVector> <sourceSecret>
Arguments
keyVector Name of and, optionally, path to the target FIPS appliance's key vector. /nsconfig/ssl/ is the default path.
sourceSecret Name of and, optionally, path to the source FIPS appliance's secret data. /nsconfig/ssl/ is the default path.
Example
enable fipsSIMtarget /nsconfig/ssl/target.key /nsconfig/ssl/source.secret
init ssl fipsSIMTarget
Initialize the target (secondary) FIPS appliance for participating in a secure exchange of keys with the primary FIPS appliance.
Synopsis
init ssl fipsSIMTarget <certFile> <keyVector> <targetSecret>
Arguments
certFile Name of and, optionally, path to the source FIPS appliance's certificate file. /nsconfig/ssl/ is the default path.
keyVector Name for and, optionally, path to the target FIPS appliance's key vector. /nsconfig/ssl/ is the default path.
targetSecret Name for and, optionally, path to the target FIPS appliance's secret data. The default input path for the secret data is /nsconfig/ssl/.
Example
init fipsSIMtarget /nsconfig/ssl/source.cert /nsconfig/ssl/target.key /nsconfig/ssl/target.secret