User guide

To replace all administrator cards or to create a larger number of cards for a security
world:
1. Create a new security world.
2. Choose Replace Administrator Card Set from the list of configuration tasks.
3. Enter the pass phrase for the security world.
4. When prompted, insert an un-formatted smart card or an administrator card whose
data you can safely overwrite into the smart card reader with the contacts facing up.
5. Enter the additional initialization information for which you are prompted.
6. Repeat steps 4 and 5 for as many cards as you want to create.
7. Store at least one of the administrator cards in a secure location.
Related
Documentation
Recovering an Archived Security World on page 20•
Recovering an Archived Security World
In rare cases, you may need to recover your system using an archived security world. The
archived security world may be an older version of the security world that already exists
on your system or the same version. In order to recover your system, you must have access
to the system configuration file (by default, system.cfg) that holds the archived security
world and its corresponding certificate.
In addition, if you are overwriting your security world with a different security world, you
must have physical access to:
•
All of the cryptographic modules that belong to the security world.
•
A smart card reader (if you use an older model Secure Access device that does not
contain a built-in card reader).
•
An administrator card that is pre-initialized with the security world and administrator
passphrase that you want to import.
Importing a Security World Into a Stand-Alone Secure Access Device
Copyright © 2012, Juniper Networks, Inc.20
SA Series 4500, 6500, and FIPS Appliances