Update on Networks and HSM set up
1-Dec
resolved just in time for the engineer on site
30-Nov
Hi Paul, An engineer has been on site already, to set up their IP address etc. I believe any additional work can be done remotely from the server once connectivity is established. The last thing we need to to then is set up a second nic on the servers with the IP addresses listed below on the new VLAN: fin-bacs:192.168.3.179 fin-bacs-test:192.168.3.177 If a windows firewall needs opened on this vlan, it would be in from the 2 HSM devices 192.168.3.178 192.168.3.180 then I can check that the servers can communicate with these devices (ping or telnet).
Alister
ref I150820-0346 new VLAN for BACS servers & HSM
26-Nov
Just sent out email asking Ravi to confirm Glen Davies arriving on 1st Dec as previously arranged (5-Nov)
Alister pursuing Unidesk to ensure HSM's are connected ready for use
24-Nov
All servers updated as planned
11-Nov
ITI Architecture picked up the 2 HSM's from Alister, 1 to go to King's Buildings and 1 to go to Appleton Tower
28-Oct
Please see
- PICCL 13 for details
22-Oct
I completely understand, we can use one certificate for both HSMs which is not a problem, we have many customers which have a similar setup.
Ravi
Thanks for the update. That is an unexpected cost, that had never been mentioned previously. If we can use one certificate for both, that would seem the best option as it would avoid paying a second £1100, so unless there are any drawbacks with that, It is the option I will go for.
I will contact our relationship manager at the bank and pass on the details.
Garry
------
21-Oct
Reply to Garry,
Thanks for your response, are you able to confirm with RBS they are happy with the following Distinguishing Name:
CN=RBS HSM1,OU=UOF,O=UNIVERSITY OF EDINBURGH,C=GB
The cost of the certificate is roughly £1,100, however this is provided by the bank so we do request you to liaise with your bank. As you do have 2 HSMs, you can apply for certificate which we can apply to both HSMs or we can have a unique certificate per HSM.
-------
15-Oct
Query to Ravi,
I wonder if you can help with some advice. I have received some conflicting information when I phoned our bank today (conflicting with what they were saying last time I phoned, and they also had no interest in our SPF number this time!).
When I phoned their help line this morning, I was told that they wouldn’t normally supply the Distinguishing Name, we just have to tell them what we were going to use for out distinguishing name? This seems different to all feedback so far.
I was also told that I should be going through our relationship manager at the bank and they would send me the form that I would have to complete and send in to submit a request to use a HSM. Also, I should also be speaking to the relationship manager to confirm the cost of the certificate, but it would be approximately £1,100?
Ravi, from your experience, does that seem correct?
--------
14-Oct
Ravi has indicated that - The Software Package ID is SFP0124, known as Paybase 10 or C-Series. Please ensure all your Service User Numbers are linked to this package ID.
------- Business Spoke to Garry about the HSM preparation document. Garry had phoned the bank and had asked for a Bottomline code which Garry then asked Ravi for, however he has not received it yet.
Ravi from Bottomline:replied in italics with further queries and answers to the following questions :
Please confirm you have received your Distinguishing Name?
I assume it would be our technical contact at the bank who would be able to provide this for us, in your experience is that correct? - I need to understand who your sponsoring bank is so I can advise accordingly.
How many certificates will you require?
Would this be 1 certificate per bank or one per HSM? - This would be 1 per bank but up to you if you would like 1 per HSM (from the same bank). The HSM certificates can be copied from production HSM to DR HSM.
Will you be using the same certificates for production and DR/Test HSM?
With our likely setup, would we use the same certificate for both? - This is a business decision
IS Apps
Anne updated the
Unidesk call I150820-0346 (new VLAN - FIN106 Albacs replacement) updated this week with questions from Stefan :
'Can we please get a confirmation on this from ITI regarding:
1) duration of outage
2) list of vm servers affected.
This looks as we will have to give at least 5 days notice to users and raise an alert, but will know more once we have 1) and 2)'
6-Oct
'Ravi just phoned and would like some information.
Alister will fill in the files as far as he can and then forward to Garry to complete the rest.
What Ravi is particularly interested in is
1 Sponsoring bank
2 the IP address
Ravi said this will let them complete some pre-work even though we do not have the networks set up yet
Garry, did you mention that we, Edi Uni, is looking at changing banks?
If so, then Ravi would need to know when as it determines the process they need to follow
- For some banks Bottomline may be able to do generate the Distinguishing name,
- but other banks involve us having to go into the bank to obtain the certificate.
Also changing the sponsoring bank has an implication for Bottomline and us?'
Alister updated the HSM preparation document that Ravi sent with as much as he could before sending on to Garry to complete