24.10.2014 Views

iSTAR eX Installation and Configuration Guide - Tyco Security ...

iSTAR eX Installation and Configuration Guide - Tyco Security ...

iSTAR eX Installation and Configuration Guide - Tyco Security ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Table of Contents<br />

Controller certificate status information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-63<br />

Approving or denying controller certificate signing request . . . . . . . . . . . . . . . 5-63<br />

ICU Certificate Signing <strong>and</strong> Restore Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-67<br />

Task Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-69<br />

Using Default Certificates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-69<br />

Adding a new controller to an existing Default cluster . . . . . . . . . . . . . . . . . . . . . . . . 5-69<br />

Setting up a custom controller certificate, non-FIPS system . . . . . . . . . . . . . . . . . . . . 5-69<br />

Adding New Controller to existing custom controller cluster . . . . . . . . . . . . . . . . . . 5-70<br />

Adding a Controller to an existing system when C•CURE is the CA. . . . . . . . 5-70<br />

Adding a Controller to a existing system when using a Commercial CA . . . . 5-71<br />

Adding New Controller to an existing Custom Host Cluster. . . . . . . . . . . . . . . . . . . 5-71<br />

Set up a custom host certificate, non-FIPS system . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-73<br />

Set up Custom Controller Certificate, FIPS System . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-74<br />

Set up Custom Host Certificate, FIPS System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-75<br />

Changing CA Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-76<br />

Changing Host Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-76<br />

Using Certificates Generated by a Commercial CA System . . . . . . . . . . . . . . . . . . . . 5-77<br />

Turning On FIPS 140-2 Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-77<br />

Turning Off FIPS 140-2 Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-78<br />

Turning off Custom Certificates <strong>and</strong> Using Default certificates. . . . . . . . . . . . . . . . . 5-79<br />

How to Disable ICU. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-79<br />

Reserved TCP/IP Network Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-79<br />

Setting up Custom Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-80<br />

Setting up Custom Host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-80<br />

Chapter 6<br />

Using the <strong>iSTAR</strong> <strong>Configuration</strong> Utility (ICU)<br />

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-2<br />

Configuring a Master Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3<br />

Troubleshooting Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3<br />

<strong>Configuration</strong> Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3<br />

General <strong>Configuration</strong> Procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-4<br />

LAN <strong>Configuration</strong>s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4<br />

WAN <strong>Configuration</strong>s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-5<br />

Copying the ICU onto a PC or Laptop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-8<br />

Underst<strong>and</strong>ing the ICU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-9<br />

Displaying <strong>and</strong> Updating Cluster Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-9<br />

x<br />

<strong>iSTAR</strong> <strong>eX</strong> <strong>Installation</strong> <strong>and</strong> <strong>Configuration</strong> <strong>Guide</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!