To configure a global MACsec connectivity association

Purpose

Perform this procedure to create a connectivity association for HSM key management.

Note: Before you can use an HSM for key management, you must add the HSM to the NFM-P configuration; see the procedure to add an HSM to the NFM-P in the NSP System Administrator Guide.

Note: The NFM-P does not store CAKs generated by an HSM.

Steps
 

Choose Manage → MACsec from the NFM-P main menu. The Manage MACsec form opens.


Click Create → Connectivity Association, or choose a connectivity association and click Properties. The Connectivity Association (Create|Edit) form opens.


Configure the required General parameters.


In the Keying Parameters panel, configure the Key Source parameter.

If you choose HSM, click the Select button and select an HSM.


Configure the required parameters for Static CAK.


Close the forms.

End of steps