User's Guide Part 2

Managing security Chapter 6 Operation
phn-0896_009v003
6-100
UNDER DEVELOPMENT
Feb 2010
Step 1: Enter key of keys
The PTP600 uses a key of keys approach to encrypt all critical security parameters
(CSPs). Erasing of the keys of keys will render all CSPs inaccessible.
Generate a key of keys encryption key using a FIPS approved key generator. The key
length is dictated by the prevailing licence key. Licence keys with AES-128 will require
a key of keys of 128-bits. Licence keys with AES-256 will require a key of keys of 256-
bits. The key output should be in ASCII hexadecimal characters.
To enter the key of keys via the Security Wizard, proceed as follows:
Procedure 6-11 Enter the key of keys
1
The Step 1: Enter Key of Keys page is displayed (
Figure 6-55).
2
Enter the generated key of keys in both the Key Of Keys and Confirm Key Of Keys
fields. If the two values are not identical, an error message is displayed.
3
Select Next.
Figure 6-55 Step 1: Enter Key of Keys page