Sun Microsystems manual Zeroizing a Sun Crypto Accelerator 4000 Board

Zeroizing a Sun Crypto Accelerator 4000 Board

In some situations, it might be necessary to clear a board of all its key material. This can be done using two methods. The first method is with a hardware jumper; this form of zeroizing will return the Sun Crypto Accelerator 4000 board to its original factory state (failsafe mode). See “Zeroizing the Sun Crypto Accelerator 4000 Hardware to the Factory State” on page 163. The second method is to use the zeroize command.

Note –The zeroize command only removes the key material, and leaves any updated firmware intact. This command also logs the security officer out upon successful completion.

To zeroize a board with the zeroize command, enter the following:

vcaadm{vcaN@hostname, sec_officer}> zeroize

WARNING: Issuing this command will zeroize all keys on the board. Once zeroized, these keys cannot be recovered unless you have previously backed up your master key.

Proceed with zeroize? (Y/Yes/N/No) [No]: y

All keys zeroized successfully.

Using the vcaadm diagnostics Command

Diagnostics can be run from the vcaadm utility in addition to SunVTS. The diagnostics command in vcaadm covers three major categories in the Sun Crypto Accelerator 4000 hardware: general hardware, cryptographic subsystem, and network subsystem. Tests for general hardware cover DRAM, flash memory, the PCI

80 Sun Crypto Accelerator 4000 Board Installation and User’s Guide • May 2003