Appendix

September 11, 2018

Contributed by: C

Sample commands with their outputs are given below.

Run the script

     root@ns# pwd
    /var/safenet/config
    root@ns# sh safenet_config

Create a certificate

    root@ns# cd /var/safenet/safenet/lunaclient/bin
    root@ns# ./vtl createcert -n 10.102.59.175
    Private Key created and written to: /var/safenet/safenet/lunaclient/cert/client/10.102.59.175Key.pem
    Certificate created and written to: /var/safenet/safenet/lunaclient/cert/client/10.102.59.175.pem

Copy the cetificate to the HSM

    root@ns# scp /var/safenet/safenet/lunaclient/cert/client/10.102.59.175.pem admin@10.217.2.7:
    admin@10.217.2.7's password:

    10.102.59.175.pem          100%  818     0.8KB/s   00:00

Copy the certificate and key from the HSM to the NetScaler appliance

    root@ns# scp admin@10.217.2.7:server.pem /var/safenet/safenet/lunaclient/server.2.7.pem
    admin@10.217.2.7's password:

    server.pem            100% 1164     1.1KB/s   00:01

Use SSH to connect to the SafeNet HSM

    ssh admin@10.217.2.7
    Connecting to 10.217.2.7:22...
    Connection established.
    To escape to local shell, press 'Ctrl+Alt+]'.

    Last login: Thu Jun 23 02:20:29 2016 from 10.252.243.11

    Luna SA 5.2.3-1 Command Line Shell - Copyright (c) 2001-2014 SafeNet, Inc. All rights reserved.

    [Safenet1] lunash:>hsm login


      Please enter the HSM Administrators' password:
      > *******

    'hsm login' successful.


    Command Result : 0 (Success)
    [Safenet1] lunash:>

Register the NetScaler on the SafeNet HSM

    [Safenet1] lunash:>client register -client ns175 -ip 10.102.59.175

    'client register' successful.

    Command Result : 0 (Success)
    [Safenet1] lunash:>

Assign the client a partition from the partition list

    [Safenet1] lunash:>client assignPartition -client ns175 -partition p2

    'client assignPartition' successful.

    Command Result : 0 (Success)
    [Safenet1] lunash:>

Register the HSM with its certificate on the NetScaler

    root@ns# ./vtl addserver -n 10.217.2.7 -c /var/safenet/safenet/lunaclient/server.2.7.pem

    New server 10.217.2.7 successfully added to server list.

Verify the network trust links (NTLs) connectivity between the ADC and HSM

    root@ns# ./vtl verify

    The following Luna SA Slots/Partitions were found:

    Slot        Serial #                  Label
    ====      ================           =====
       0              477877010          p2

Save the configuration

    root@ns# cp /etc/Chrystoki.conf /var/safenet/config/

Configure automatic start of the gateway daemon at boot time

    touch /var/safenet/safenet_is_enrolled

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Appendix

September 11, 2018

Contributed by: C

Run the script
Create a certificate
Copy the cetificate to the HSM
Copy the certificate and key from the HSM to the NetScaler appliance
Use SSH to connect to the SafeNet HSM
Register the NetScaler on the SafeNet HSM
Assign the client a partition from the partition list
Register the HSM with its certificate on the NetScaler
Verify the network trust links (NTLs) connectivity between the ADC and HSM
Save the configuration
Configure automatic start of the gateway daemon at boot time

Edit this article

Appendix

Run the script

Create a certificate

Copy the cetificate to the HSM

Copy the certificate and key from the HSM to the NetScaler appliance

Use SSH to connect to the SafeNet HSM

Register the NetScaler on the SafeNet HSM

Assign the client a partition from the partition list

Register the HSM with its certificate on the NetScaler

Verify the network trust links (NTLs) connectivity between the ADC and HSM

Save the configuration

Configure automatic start of the gateway daemon at boot time

Appendix

In this article