Chapter 4: Installing and Configuring a DSM
Configuring a Virtual Appliance
DSM Installation and Configuration Guide
Copyright 2009 - 2020 Thales Group. All rights reserved.
74
l
"Access the Command Line Interface (CLI)" below
Specify host name resolution method
You can map a host name to an IP address using a Domain Name Server (DNS). DNS is the preferred method of host
name resolution.
You can also modify the hosts file on the DSM or identify a host using only the IP address.
l
If you use DNS to resolve host names, use the FQDN for the host names.
l
If you do NOT use a DNS server to resolve host names, do the following on all of the DSMs and all of the
protected hosts:
o
Modify the host file on the DSM: To use names like serverx.domain.com, enter the host names and matching
IP addresses in the /etc/hosts file using the host command under the network menu. For example:
0011:network$ host add <hostname> 192.168.1.1
SUCCESS: add host
0012:network$ host show
name=localhost1.localdomain1 ip=::1
name=<hostname>.<domainname>.com ip=192.168.10.8
name=<hostname> ip=192.168.1.1
SUCCESS: show host
You must do one of the following on each DSM, since entries in the host file are not replicated across
DSMs.
o
Modify the host file on the protected hosts:
Enter the DSM host names and matching IP addresses in the /etc/hosts file on the protected host. You
must do this on EACH protected host making sure to add an entry for all DSM nodes (if using HA).
o
Use IP addresses:
You may use IP addresses or the FQDN to identify the host simultaneously. In other words, they don't all
have to use an IP address or FQDN.
Configure Ports
If a DSM must communicate with a device behind a firewall, you must open various ports in the firewall as shown in
the following figures.
l
To see the ports to configure, see "Ports to Configure" on page171
Access the Command Line Interface (CLI)
The CLI commands are used to configure the DSM. The commands are grouped into the following categories or
submenus. Entering ? on the CLI command line lists those categories:
$ ?
network Networking configuration
system System configuration
hsm HSM configuration
maintenance System maintenance utilities
ha HA configuration
ipmi IPMI configuration
user User configuration
exit Exit
To enter a submenu, enter a name or just the first few letters of the name. To display the commands for that submenu,
enter a ?. For example, the submenu maintenance is used to provide maintenance utilities: