iSecure User Manual - TapeEncryption.com
Contents
1. 12 19 04 12 19 04 12 19 04 12 19 04 12 19 04 12 19 04 12 Paranoia Unit P3 Serial No SNum User DD MM YY 0002090 Description Set Time Date Confirm Password Confirm Password Confirm Password Set Secure Mode Drive 1 Set Non Secure Mode Drive 1 Confirm Password Set Secure Mode Drive 1 Set Non Secure Mode Drive 1 Confirm Password Set Time Date Confirm Password Set Secure Mode Drive 1 Set Time Date Set Encryption Level Confirm Key 2 The latest log entry is at the top and for security reasons no name is shown but simply the user ID In the example shown user 2 is the Auditor User 1 is the backup operator User 3 is the Full Administrator and user 4 is the operator The log is saved automatically and can be printed out if required The earlier logs which have been saved can be reviewed by using the drop down Security Logs tab selected the unit you are interested in and then double clicking that entry to display the full log This log can also be printed out PrintMenu View Stored Units 10 44 1 171 1000 10 44 1 175 1000 0002090 0002087 10 iSecure User and Installation Manual Section 4 Problem Solving 4 Setting the IP connection on a Paranoia or SecureCopy3 Unit The Paranoia and SecureCopy3 units are supplied with an Ethernet cross over cable which can be used to connect a laptop or PC directly to the Ethernet connector marked Network at the rear of the unit without the2. software is now installed iSecure User and Installation Manual Section 3 Running iSecure Running iSecure To run the iSecure package place the programmed card in the reader and then select the iSecure programme from the Start menu It will then prompt you to enter the PIN for the card as below Enter your PIN and if this is the first use and the administrator has enforced a change of pin you will need to do this before continuing to the connection screen below COM Port TCP IP TCP IP ssh Device ID Test 1 iSecure User and Installation Manual Section 3 Running iSecure At this point enter the IP address and the description you wish to identify this specific device by Once you enter this the option to add a new entry or update an existing one is given as shown below fs ie The iSecure application will store multiple device IPs and descriptions to allow easy selection of different units When using multiple units select the required one and then choose select to connect to it P3 Fibre i520 10 44 1 171 1000 Paranoia3 Fibre i520 10 44 1 141 1000 P3 Fibre SUN2 10 44 2302 1000 P3 LVD4 Unisys 10 44 21 19 1000 P3LVD2 Unisys 10 44 22 43 1000 6 iSecure User and Installation Manual Section 3 Running iSecure The display below shows a Full Administrator connected to a Paranoia3 with two drives attached The Status shows both P and K in green This indicates that the password an
3. treaties Unauthorized duplication or distribution of this program or any portion of it may result in severe civil or criminal penalties and will be prosecuted to the maximum extent possible under the law You will then be prompted to either accept the defaults or enter a new directory where you want the programme to install Unless you have a specific reason to change it we suggest you accept the defaults Select Installation Folder The installer will install Secure nterprise to the following folder To install in this folder click Next To install to a different folder enter it below or click Browse Folder CADisuksiS ecureE nterprise Install Secure Enterprise for yourself or for anyone who uses this computer Everyone G Just me 2 iSecure User and Installation Manual Section 2 Installation Contirm Installation The installer ts ready to install SecureEnterprise on your computer Click Next to start the installation Confirm the installation and select Next and the installation will now complete Installing iSecureEnterprise Securek nterprise i being installed Please wait a iSecure User and Installation Manual Section 2 Installation Installation Complete ISecurec nterprise has been successtully installed Click Close to exit Please use Windows Update to check for any critical updates to the NET Framework Cancel lt Back The iSecure
4. CP server will drop Timeout and Disconnect the connection The factory setting is 600 seconds Client Override If no activity is detected on a TCP IP connection within this timeout Timeout period the TCP server will disconnect the current TCP IP connection and allow the new incoming connection request to connect The factory setting is 0 Outgoing Connections If this option is enabled the Paranoia3 will initiate a connection to an Outgoing Number Outgoing Address Either the name e g www disuk com or numeric IP address e g 10 1 1 2 of the destination Not normally used Outgoing Timeout Inactivity timeout for the outgoing connection Not normally used 13 outside destination when the selected conditions are met The three options are e Don t Initiate Connections e Connect on Power up e Connect when receiving serial data This will be set to Don t Initiate Connections Do not change Port Destination port number Not normally used iSecure User and Installation Manual Section 4 Problem Solving 5 Problem Solving am getting Card System Not connected message A This indicates that the system has not seen the card in the card reader or the card reader is not connected B If this ison a grey background it indicates that either the USB card reader has not been found or that no card is loaded C If the card reader is not connected you will need to connect the card reader and then close
5. DISUK iSecure Enterprise User and Installation Guide Version 2 April 2012 DISUK Limited 43 Brunel Close Drayton Fields Industrial Estate Daventry Northants NN11 8RB United Kingdom Phone 44 1327 313888 Email info disuk com Web www disuk com Document Release History amp Revision Level Changes es ee fd TT SS TT Td The contents of this manual may be revised without prior notice The contents of this manual shall not be disclosed in any way or reproduced in any media without the express written permission of DISUK Limited All RIGHTS RESERVED Copyright DISUK LIMITED 2008 2012 iSecure User amp Installation Guide Table of Contents T SEI CIC ON oe A sence sneuusoaninerneateseeceee see 1 2 MSTA ATION sedisetoi etter a gaceclateienisedeeean dation eete eee ates 2 gt ARUN SCC UN Crh tartanitetah ceatesats E EEA cries uiteraitnient aon iloneade 5 4 Setting the IP connection on a Paranoia or SecureCOpy3 UNnit c cc ceecccsssseceeeeseeeeeeees 11 41 Network Configuration e sendid a a E 11 4 2 Operational Configuration cccccccessecccceseccccesececeesececeeeeceeeeesecessuececeeneceeseneeeetas 12 4 3 Device Network SettingS ccccccssccccssseccccsecccceesececeeseceeeeeeceeeeesecessenecessegeceeseneeeetes 12 4 4 Device Connection Settings ccccccsccsscccseccseceseccseccsecceecseeceeecetcauecesscessceseceseeeaes 13 SD Problem SOIWIN Basicicsucssiancchetevec
6. Form 6 Comment Form We would appreciate your comments and suggestions regarding this manual Please list any errors or suggestions for improvement Please complete and send this form to the address below We will use your comments in planning future editions DISUK Limited Technical Publications 43 Brunel Close Drayton Fields Industrial Estate Daventry Northants NN11 8RB U K Phone 44 0 1327 313888 Category Excellent General appearance ef Easy to understand Pe Complete Illustrations Technical level Pf Organization Pf Acronyms amp abbreviations fe Accuracy Manual Code Ld ManualName L o 15 iSecure User and Installation Manual 7 Index PUNTO sain eee es 3 4 BO eaea E cat 3 3 cara redder ansie a 4 1 COM PON arare 3 1 configure the UNIt cceccccesseceeeeeeees 2 1 Connect pittore 3 1 Encrypt DUON cerna aa 3 3 Full Administrator 3 3 3 4 IP adare E a tsa sores cen es tieoaenaeets 3 1 16 Section 6 Index KEY management ceeccceeseceeeeeeeeees 1 1 e 241 018 geet ener or EN 3 4 OPEN O araa 3 3 3 4 a ID PENE E E E Boch A ETES 3 1 Problem Solving cesecccessseceeeeeeeeees 4 1 SUIS aos A N N 3 3 system administrator 3 1 3 2 USB cardreader esros neice ees 1 1 4 1 VIEW LOSS css seine an N 3 4 iSecure User and Installation Manual DISUK Limited 43 Brunel Close Drayton Fields Industrial Estate Daventry Northamptonshire NN11 8RB Un
7. and restart the programme If the problem persists please check that the drivers are loaded and the device is visible in Windows z gt m Computer Management Seles lm Fie Action View Window Help x e H amp R m Computer Management Local Ho System Tools gi Event viewer E3 Shared Folders 7 Local Users and Groups Computer Disk drives 2 Display adapters 3 DYDICD ROM drives a Device Manager Sy Storage E3 Removable Storage Mice and other pointing devices Disk Defragmenter 2 Modems Disk Management 2 Monitors a Services and Applications B Network adapters Ports COM amp LPT Se Processors Smart card readers QB ACR38 Smart Card Reader Sound video and game controllers ge Storage volumes System devices Universal Serial Bus controllers E IDE ATAJATAPI controllers gt Keyboards E Performance Logs and Alert dg Human Interface Devices 3 a D If the background to the message is Red it indicates a card reader is connected but no card is loaded in it Loading a card will correct this To order replacement cards or extra USB readers either contact your supplier or contact DISUK Ltd direct at DISUK Limited Phone 44 0 1327 313888 43 Brunel Close Drayton Fields Industrial Estate Web www disuk com Daventry Northants NN11 8RB U K support disuk com 14 iSecure User and Installation Manual Section 5 Comment
8. d the two keys have been entered into the device When first connecting to a device that does not have the password and keys entered these will show red but as long as the card being used has the ability to load the keys these indicators will change showing the progress yellow showing only one key has been entered and then green to show both are loaded At this point the unit is not set secure but keys are loaded into the unit File Security Logs Full Administrator Patrick Li System Name ibAl Exp 10 44 1 175 1000 The tape drives must be either unloaded or at BOT for the keys to be downloaded If you get the message as shown below use the system to unload or rewind the tapes to BOT and then try again to connect to the unit Bel iSecure Enterprise Version 1 0 1 5 File Security Logs Full Administrator Patrick Li System Name Paranoia3 Fibre i520 10 44 1 171 1000 Eror Setting Keys Tape Drive s Not At BOT Status P View Logs Set Timeout 7 iSecure User and Installation Manual Section 3 Running iSecure To set a device secure simply click on the Encrypt button and the LCD display turns green indicating the unit is now secure al secure Enterprise Version 1 0 1 5 File Security Logs Full Administrator Patrick Li System Name 520 Eq 10 44 1 175 1000 Status Pg kK g For a multiple drive connections first select the correct drive using the Drive number button if only one drive is connected
9. e right as well as the other device network settings When using a static IP address enter the net mask in this field Device Gateway When using a static IP address enter the IP address of the Gateway in this field DNS Server When using a static IP address enter the IP address of the DNS Server in this Field 12 iSecure User and Installation Manual Section 4 Problem Solving 4 4 Device Connection Settings 3 http 10 1 1 33 INDEX HTM Microsoft Internet Explorer File Edit View Favorites Tools Help Ei Back Forward Stop Refresh Home Search Favorites History Print Edit Dell Home Real com Address hitp 10 1 1 33 NDEXHTM Go Links Norton Antivirus Device Connection Settings Listening for connections V Listen On Part 23 Timeout and disconnect after feo Seconds of inactivity Alluw new conneclion if the existing conneclion Has beer idle fur 30 Securus l Making outgoing connections Don tinitiate connections Connect On Port 0 To Enter Server name or IP address Timeout and disconnect after 60 Seconds of inactivity Retry failed outgoing connections after e00 Seconds z Done Interet f Server Listen Port Select the checkbox and enter the listening port number you want the TCP serial server to listen on for incoming connections The default is set to 1000 Client Activity If no activity is detected on a TCP IP connection the T
10. eesnbeiesshiges a 14 Be COMMING FOT cna outna ccs ds ntec env ans is cok ivewesnaeccautisgsesnm un detaae cet eveter detcaee sheceninaeesea 15 Section 1 Introduction 1 Introduction iSecure is part of the simple key management software enabling the configuration of smart cards for use to configure and monitor tape encryption appliances designed around the Paranoia tape encryption appliance technology The product is normally shipped as a complete kit comprising of the iCard Software the iSecure software at least two USB card readers and a minimum of ten cards Extra card readers and cards can be sourced through your normal Paranoia product suppliers 1 iSecure User and Installation Manual Section 2 Installation 2 Installation iSecure is the programme that allows users to monitor display and configure the Paranoia2 ParanoiaFF Paranoia3 and SafeTape units according to the rights granted to them by the smartcard iSecure cannot be run without a smartcard reader and configured smartcard Install the programme on the PC or server that is to be used to monitor and or configure the unit To start the installation run the setup programme and follow the prompts as shown below fq iSecureEnterpris Welcome to the ISecureEnterprise Setup Wizard The installer will guide you through the steps required to install SecureEnterprise on your computer WARNING This computer program is protected by copyright law and international
11. ited Kingdom Tel 44 1327 313 888 Email info disuk com
12. need of a hub or switch If you have access to the network the unit can be connected in the normal way with standard cables Do not try to use the supplied cross over cable to connect to a standard network Once you are connected follow the procedure below 4 1 Network Configuration From the CD run IPSetup exe You will see a dialog box like the one below a NetBurner PSetup V2 0 x NDE Settings Pf ho 1 1 38 E CF7 2 40 00 08 F 4 01 GE 31 at 10 1 1 39 running M00527 00 03 F4 02 25 49 at 10 1 1 15 running Network Mask 255 255 255 0 MOD5282 00 03 F4 01 52 8E at 10 1 1 200 running Gateway 10 1010 1 DNS Ses te au Baudrate fi 15200 Search Again Launch webpage Advanced Help Close Click the Search Again button to locate your unit in the Select a Unit pane If your Paranoia3 unit does not appear verify the power and link LED s on your MNGT connection on the front panel are illuminated if not correct any cabling errors Note that IPSetup uses a UDP broadcast protocol similar to BOOTP and will not operate through a router A If your network supports DHCP The assigned IP address will appear in the Select a Unit pane B If your network does not support DHCP Configure the IP Address and Mask fields If you need help selecting values see the Selecting an IP Address section of this manual After you have entered the values select the Set button to configure the Paranoia3 uni
13. t with the new parameters Verify the network connection is working properly by executing the following command from a command prompt ping lt ip address gt For example type ping 10 1 1 33 without the quotes at the command prompt and press the Enter key on your keyboard 11 iSecure User and Installation Manual Section 4 Problem Solving 4 2 Operational Configuration Once the network parameters have been configured you can use the web server interface to modify setting of the Paranoia3 To access the web page on the unit open a web browser and enter the numeric IP Address in the address field 4 3 Device Network Settings E http 7710 1 1 3371INDEX HTH Microsoft Internet Explorer Fie Edit View Favorites Tools Help Back Forward Stop Refresh Home Search Favorites History Print Edit Address http 10 1 1 33 INDEXHTM x Go NY tBurner Networking in 1 Day Device Network Settings vr DellHome Real com Links all Norton Antivirus b SB72 Device address Static settings a e Device net mask 255 255 2550 Device gateway hoiii o DNS server 207 69 188 186 Device Name for DHCP 5572 0818 SB72 Device Address Selects the IP address of the Paranoia3 unit If DHCP is selected the Paranoia3 will obtain IP address information automatically including the net mask gateway and DNS server If Static is selected you need to supply the static IP address in the edit box to th
14. this will not be applicable then select the Encrypt button As long as the tape is either at BOT or unloaded the display background will go green and this drive is secure as shown below File Security Logs Full Administrator eee System Name i520 Exp 10 44 1 175 1000 It should be noted that the function shown are determined when the card is generated the user above is a Full Administrator and can change the encryption status as well as viewing the logs 8 iSecure User and Installation Manual Section 3 Running iSecure The display below is that for a simple operator who has only the ability to view the displays from the drive but has no ability to change anything File Security Logs Operator Willian Beck System Name CARDEXS 10 44 17 171 1000 The Auditor screen shown below simply allows him to check that the keys are set and to view the logs no indication of the actual status of the drives is available File Security Logs Daniel F Webb System Name CARDEAS 10 44 1 171 1000 The View Logs button produces a log showing which operator did what and when as shown on the following page iSecure User and Installation Manual View Print Menu Section 3 Running iSecure 0077 0076 0075 0074 0073 0072 0071 0070 0069 0068 0067 0066 0065 0064 0063 0062 WWWWWWR RRM M hw BPP 20 04 12 20 04 12 19 04 12 19 04 12 19 04 12 19 04 12 19 04 12 19 04 12 19 04 12 19 04
Download Pdf Manuals
Related Search