The HSM is fitted into the rack using the standard L-shaped fittings supplied by the rack manufacturer. If these are not available then runner kits for fitting the HSM can be obtained from Thales e-Security.
Two keys are required to fit an HSM into a rack and, subsequently, to change the HSM between the offline, secure and normal operation states. One key is for the left-hand lock and the other for the right-hand lock (see Figure 1). The keys are unmarked when they leave the factory (except for a number tag). Note the tag numbers, because it is impossible to replace a key without this number (the keys CANNOT be copied legally by a locksmith). The keys are normally retained by independent security officers to provide dual control. Duplicate of each key are supplied with each unit.
For each HSM, make a note of its serial number and associated key tag numbers, and store this information in a secure location; it may be useful if a key needs to be replaced later.
To identify the correct key for each lock, use trial and error. Mark the keys for future identification (in accordance with the local/internal policy on secure physical keys) and remove the manufacturer’s identification tag.
The movement detector within the HSM is enabled when the HSM is in normal operation mode.