Black Box ET0100A, ET1000A, ET0010A, EncrypTight manual Index

Index

certificate revocation lists (CRLs), see CRLs, 287 certificates

See also Certificate Manager about, 262

and common access cards, 294 certificate policy extensions, 269 certificate revocation lists (CRLs), 287 configuring CRL usage, 287 configuring CRL usage in EncrypTight, 288 configuring CRL usage on the ETKMS, 288 deleting all on an ETEP, 293

deleting specific certificates from an ETEP, 287

distinguished name, 264 EncrypTight keystore password, 266 errors, 249

ETKMS keystore password, 266 exporting from EncrypTight or the ETKMS,

275

generating a key pair, 272

generating a key pair (EncrypTight and the ETKMS), 273

handling revocation check failures, 289 HSM, 275

HSM keystore password, 268

importing CA certificates for EncrypTight and the ETKMS, 274

importing certificate replies for EncrypTight and the ETKMS, 274

invalid, 250 keytool, 272

OCSP configuration, 289 planning for the use of, 34 policy constraint extension, 271 policy ETPMping, 271 prerequisites, 263

recommended order of operations, 263 requesting for EncrypTight and the ETKMS,

273

strict authentication, 262 disabling, 293 enabling, 292

using in an EncrypTight system, 265 chkconfig --list fgrep “3 on” command, 242 chkconfig --list command, 242

CLI inactivity timer ETEP, 327

clock synchronization using SNTP ETEP, 329

overview for EncrypTight components, 33 command line interface (CLI)

connecting to the CLI from ETEMS, 123 diagnostic commands, accessing, 233

commands

chkconfig --list, 242

chkconfig --list fgrep “3 on”, 242 service --status-all, 242

service --status-all fgrep “is running”, 242 common access card (CAC), 256, 294, 328

common name, 294 common name, 294 Communication preferences, 92 communication timeout, changing, 92 comparing

configurations, 100 configuration for CipherEngine

KAP network connection, 49 configuration for EncrypTight

ETKMS admin password, 47 ETKMS date and time properties, 51 ETKMS root password, 48 external ETKMS, 46

local ETKMS, 44 PEP, 55, 148

configurations on appliances comparing, 100

defining default configurations, 110 deleting, 122

downloading to appliances, 97 editing, 117

pushing, 97, 151 saving, 97

configuring an appliance ETEP, 299–342 overview, 95

connections ETKMS to PEP, 31

ETPM and local ETKMS to PEP, 26 ETPM to ETKMS, 26

external ETKMS to ETKMS, 29

copying a workspace to a new PC, 72 copying an appliance configuration to ETEMS,

100

counters, viewing, 230 CRLs

about, 287

communication preferences, 94 configuring usage in EncrypTight, 288 configuring usage on a ETKMS, 288 deleting from ETEPs, 289 installing on ETEP, 288

viewing on ETEPs, 289

CSV files, importing appliance configurations, 112

CSV files, importing PEP configurations, 150 customer support, 14

customized default configurations, 150

344 EncrypTight User Guide