DSM Installation and Configuration Guide
Copyright 2009 - 2020 Thales Group. All rights reserved.
69
Chapter 4: Installing and Configuring a DSM
Overview 69
Configuring a Virtual Appliance 71
Full Disk Encryption 86
nShield Connect Integration 86
DSM Installation on bare metal using IBM Cloud 86
DSM Installation on Hyper-V 89
Deploying a DSM Azure Image 90
Deploying a DSM AWS image 93
Deploying a DSM in the Google Cloud platform 95
KVM Deployment 98
Deploying on a Xen Hypervisor 99
High Availability (HA) Configuration for Virtual Appliances 100
The DSM virtual appliance is available as an OVA file, Azure VHD, AWS AMI, and a KVM image. The OVA is
available as a standard image, and a fastboot image with Open VM Tools (OVT) bundled in for Cloud Service
Providers, such as the Google Cloud Platform. OVT is the open source implementation of VMware Tools, and
consists of a suite of virtualization utilities that improves the functionality, administration, and management of virtual
machines within a VMware environment. The tar file contains the OVA file.
This chapter describes how to deploy the various virtual images.
Overview
DSM supports full disk encryption for enhanced security, and dynamic IP addressing via DHCP. The full disk
encryption feature is only available on a fresh installation of v6.0.2 or later.
DHCP is enabled by default on the eth0 interface on a fresh v6.0.2 and above installation but, must be enabled
manually, if a DSM appliance is upgraded to v6.0.2 and later versions. See "Upgrading the DSM" on page115 for
details about upgrading the DSM appliance.
The V6000 and virtual appliances can be HSM-enabled by connecting them to an nShield Connect appliance. The
Network HSM support feature enables DSMs that do not have a built-in hardware security module (HSM) —DSM
V6000 hardware appliance and the virtual appliance—to utilize an nShield Connect HSM appliance to store the DSM
master key. See "nShield Connect Integration" on page63 for details about this feature. The appliance can be HSM-
enabled after it has been configured.
After enabling the HSM, you will have the DSM virtual appliance setup as shown in the following figure.
To Next Page
Loading...
