Adding Another HSM to the Security Domain
New payShield HSMs have Thales warranting on them and can be added by using the instructions for Remote Commissioning of a warranted payShield.
-
Log into payShield Manager using the address of the new HSM to be commissioned.
-
Select Commission when it comes up on the browser.
-
Remotely load the security domain (CTA) when prompted by the wizard.
-
Set the HRK passphrase for the HSM, when prompted by the wizard. Passphrases require the following:
- At least 2 upper case characters
- At least 2 lower case characters
- At least 2 numbers
- At least 2 special characters
-
Create (or sign existing) left and right key RACCs. If a set of cards is used for each individual HSM, then they will be commissioned first.
-
Restart the web-browser.