IDQ Quantis Appliance Manual de usuario

Quantis Appliance User Manual

Version : 2.13

Date : 06.08.202

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 2 / 47

ID Quantique SA

Ch. de la Marbrerie, 3bis

CH-1227 Carouge/Geneva

Switzerland

Tel: +41 (0)22 301 83 71

Fax: +41 (0)22 301 83 79

www.idquantique.com

info@idquantique.com

Please send any comment to

support@idquantique.com

Information in this document is subject to change without notice.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form

or by any means –electronic, mechanical, photocopying, recording or otherwise –without the

permission of ID Quantique.

Trademarks and trade names may be used in this document to refer to either the entities claiming the

marks and names or their products. ID Quantique SA disclaims any proprietary interest in the

trademarks and trade names other than its own.

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 3 / 47

Disclaimer

THIS DOCUMENT IS PROVIDED “AS IS” WITH NO WARRANTIES WHATSOEVER, INCLUDING ANY

WARRANTY OF MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR ANY PARTICULAR PURPOSE, OR

ANY WARRANTY OTHERWISE ARISING OUT OF ANY PROPOSAL, SPECIFICATION OR SAMPLE.

No license, express or implied, to any intellectual property rights is granted herein, except that a license

is hereby granted to copy and reproduce this specification for internal use only. Contact ID Quantique for

information on further licensing agreements and requirements. ID Quantique disclaims all liability,

including liability for infringement of any proprietary rights, relating to use of information in this

specification. ID Quantique assumes no liability whatsoever, and disclaims any express or implied

warranty, relating to sale and/or use of ID Quantique products including liability or warranties relating to

fitness for a particular purpose, merchantability, or infringement of any patent, copyright or other

intellectual property right. ID Quantique products are not intended for use in medical, life saving, or life

sustaining applications.

ID Quantique may make changes to documents, specifications and product descriptions at any time,

without notice. Designers must not rely on the absence or characteristics of any features or instructions

marked reserved or undefined. ID Quantique reserves these for future definition and shall have no

responsibility whatsoever for conflicts or incompatibilities arising from future changes to them.

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 4 / 47

Contents

1 Introduction .......................................................................................................................................... 7

2 System Overview................................................................................................................................... 7

2.1 Front panel....................................................................................................................................8

2.2 Rear panel.....................................................................................................................................9

2.3 Configuration Interface...............................................................................................................10

2.4 Random numbers interface ........................................................................................................10

3 Getting Started.................................................................................................................................... 10

3.1 Installation ..................................................................................................................................10

3.1.1 Physical Installation.............................................................................................................10

3.1.2 Computer configuration......................................................................................................11

3.1.3 CLI configuration.................................................................................................................11

3.2 Quick start...................................................................................................................................13

3.2.1 Change default password....................................................................................................13

3.2.2 Setup date...........................................................................................................................13

3.2.3 Setup Network interface.....................................................................................................14

3.2.4 Setup hostname..................................................................................................................15

3.2.5 Regenerate a new SSL certificate........................................................................................16

3.2.6 Check the generated certificate..........................................................................................16

3.3 Retrieving Random numbers ......................................................................................................18

3.3.1 Built-in Webserver ..............................................................................................................18

3.3.2 JSON query using web browser ..........................................................................................19

3.3.3 JSON query using Linux curl................................................................................................20

3.3.4 Retrieving numbers.............................................................................................................21

3.3.5 System Information.............................................................................................................21

3.4 Documentation ...........................................................................................................................21

3.4.1 User manual........................................................................................................................21

3.4.2 Swagger UI ..........................................................................................................................22

3.4.3 Swagger file.........................................................................................................................22

 
Quantis Appliance User Manual 
 
Document version : 2.13 
 
Distribution : Confidential Date : 06.08.2020 
 Page: 5 / 47 
 
 
SSL Certificates and security exceptions............................................................................................. 23 
1 SSL Certificates............................................................................................................................23 
1.1 Generation of a new self-signed certificate........................................................................23 
1.2 Generation of a Quantis Appliance certificate signed by an external CA...........................23 
2 Security Exception Procedure.....................................................................................................24 
2.1 Chrome Procedure..............................................................................................................24 
2.2 Firefox Procedure................................................................................................................25 
Hot Standby ........................................................................................................................................ 29 
1 Configuration of the Hot Standby...............................................................................................30 
2 Audit............................................................................................................................................31 
Command Line Interface Description ................................................................................................. 32 
1 help: Get the list of available commands ...................................................................................32 
2 cert-new: New SSL certificate.....................................................................................................33 
3 cert-export: Export a SSL certificate ...........................................................................................35 
4 cert-import: Import an SSL certificate ........................................................................................36 
5 cert-show: Display current SSL certificate detail .......................................................................37 
6 clear: Clear the console...............................................................................................................39 
7 date: Change Date and Time.......................................................................................................39 
8 exit: Exit the Command Line Interface........................................................................................40 
9 firmware-info: Firmware Information ........................................................................................40 
10 firmware-update: Firmware Update...........................................................................................40 
11 hostname: Set network hostname .............................................................................................41 
12 keep-alive: Configure Hot Standby .............................................................................................41 
13 list-usb: List files on a USB memory drive...................................................................................43 
14 monitor-log: Manage Monitor Log .............................................................................................43 
15 nic: Configure Network Interface Card .......................................................................................44 
16 ping: Test LAN connection ..........................................................................................................45 
17 pwd: Change Password...............................................................................................................45 
18 reboot: Reboot Appliance...........................................................................................................46 
19 shutdown: Shutdown Appliance................................................................................................46 

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 6 / 47

6.20 system-info: system identification..............................................................................................47

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 7 / 47

1Introduction

The Quantis Appliance is a network-attached device, which securely generates and delivers high-quality

random numbers for security and cryptographic applications in enterprise, government, gaming, and

cloud environments. The Quantis Appliance is designed for environments where high availability is

necessary. It can be inserted in or removed from an operating network with no impact on any other

appliance, such as servers, switches, and Hardware Security Modules (HSMs).

The random numbers generated by the Quantis Appliance are used for different applications: to generate

high-quality cryptographic keys for encryption or authentication, to seed deterministic PRNGs or to

provide entropy for online gaming and mathematical simulations.

This manual is intended for the system administrator, network manager, security manager or technician

who will install, configure, and operate the Quantis Appliance.

The following sections provide detailed descriptions of installation, operation, procedures and reference

material.

2System Overview

The Quantis Appliance serves as a hardware source of trust for cloud or distributed environments, on any

operating systems via the REST API. It provides secure keys for Virtual Machines (VMs), Virtual Private

Networks (VPNs), HSMs, and remote desktops. It is also used in Randomness-as-a-Service (RaaS) or

Security-as-a-Service (SaaS) environments.

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 8 / 47

Key features :

•Quantum source of full entropy, intrinsically random

•True randomness from the first bit

•Provably unpredictable entropy source

•Multi-threading up to 10’000 requests/s

•Live status verification & Health check output

•Seamless integration in any network or security solution

•Standard REST interface over HTTPs

•FIPS-compliant appliance designed for high availability

•Hot pluggable and swappable into operating networks

2.1 Front panel

The front panel provides 2 system buttons (Power & Reset) and 3 LED indicators (System power, System

hard drive disk activity, Service ID).

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 9 / 47

2.2 Rear panel

The rear panel provides:

•3 LAN ports

oLAN 1

oLAN 2

oLAN M

•2 USB 3.0 double stack Type A

•1 VGA port and 1 DB-9 COM-port.

For Quantis Appliance, please use only the LAN 1 and 2 ports, and the COM port.

Quantis Appliance User Manual

Document version : 2.13

Distribution : Confidential Date : 06.08.2020

Page: 10 / 47

2.3 Configuration Interface

The configuration of the system is done through a Command Line Interface (CLI). It uses the serial COM

port of the appliance. Use the provided USB to Serial COM port and connect to your computer.

2.4 Random numbers interface

The random numbers are available on the LAN1 interface. For this connect the provided Ethernet cable

to your LAN.

3Getting Started

3.1 Installation

3.1.1 Physical Installation

In order to install the Quantis Appliance, please perform the following steps:

1) Plug the power cable in the Power supply socket.

2) Plug the Ethernet cable in the Ethernet slot LAN1.

3) Connect the USB to Serial converter in the COM port for configuration.

4) Turn on the QA using the button in the front panel.

The appliance takes around 1 minute to boot.

Tabla de contenidos

Manuales populares de Cortafuegos de otras marcas

Cisco

Cisco S190 Manual de usuario

Fortinet

Fortinet FortiGate Voice Series Manual de usuario

ADTRAN

ADTRAN NetVanta 2300 Manual de usuario

SecureLogix

SecureLogix ETM System Manual de usuario

NETGEAR

NETGEAR ProSafe FVX538 Manual de usuario

Lanner

Lanner FW-8877 Manual de usuario

Huawei

Huawei USG6000 Series Manual de instalación y operación

H3C

H3C SecPath F5000-AI-15 Manual de usuario

Nexcom

Nexcom DNA 1150 Manual de usuario

Fortinet

Fortinet FortiGate-60 series Manual de usuario

Cisco

Cisco 3110 Manual

Draytek

Draytek Vigor2860 Series Manual de usuario

Lanner electronics

Lanner electronics FW-7650 Series Manual de usuario

Swisscom

Swisscom Internet Backup Manual de usuario

SonicWALL

SonicWALL NSa 5700 Manual de usuario

DPtech

DPtech FW1000 SERIES Manual de usuario

FEITIAN

FEITIAN MultiPass FIDO Manual de usuario

EBLOCKER

EBLOCKER PRO Manual de usuario