3Com 3CR990 Administration Manual

Also see for 3CR990: Quick start guide User guide

Contents

3Com 3CR990 Administration Manual Manual pdf 35 page image

Creating a Recovery Diskette29Adding an Activation KeyTo add a Policy Server or NIC activation key, follow the steps below.1 In the Management Console Tools menu, select License Manager. The LicenseSummary window appears.2 Click Add Keys. The Add Activation Key window appears. Enter the Policy Server orNIC activation key and click Add for each activation key you want to add.3 When you have finished adding activation keys, click Close.Creating a Recovery DisketteCommunication is encrypted between EFW devices and the Policy Server, between theManagement Console and the Policy Server, and between Policy Servers. Policy Serversidentify themselves to each other, to the Management Console, and to their EFW devices(NICs) using two public/private key pairs generated upon creation of a new EFW domain.After installing your first policy server in an EFW domain, it is critical to make a copy ofthe files named “public.key” and “server.keystore” from your installation. Save this dataindefinitely in a safe, secure location.In the unlikely event of a disaster, such as a disk crash on all your policy server machinesand a simultaneous loss of all disk backups for these machines, this recovery packageallows you to “clone” your policy server and regain management control of your NICs.A clean installation of the policy server cannot communicate with your EFW NICs (which isthe intended design, for security reasons).To create a recovery diskette:1 Insert a formatted 3.5-inch diskette into the a: drive of the computer hosting thePolicy Server.2 Save the public.key and server.keystore files to diskette. (These files are located inProgram Files -> 3Com Corporation -> 3Com EFW.)3 Remove and label the recovery diskette and store it in a secure location for as long asany EFW NIC remains in the domain for this Policy Server.NOTE: You may also use the copy-and-paste method to add activation keys ifyou have them in electronic form. To do so, highlight the activation key youwant to add and press Ctrl+c. Then, in the Add Activation Key window, pressCtrl+v to paste the activation key in the appropriate field. Click Add to add theactivation key.CAUTION: If you do not create a recovery diskette and you lose all policy serverinstallation data, you will not be able to recover your NICs. They will continue toenforce the fallback mode specified in their last EFW policy, indefinitely. These NICsmust be replaced in order to obtain a different policy.NOTE: The recovery process using this diskette is described in “Using theRecovery Diskette” on page 44.