Skip to main content
This section describes the KMES configuration steps necessary to establish connectivity with the Excrypt Touch and mount it to the SFTP or CIFS share.

​
Retrieve the Excrypt Touch serial number

Perform the following steps to retrieve the Excrypt Touch serial number:
1
From the Excrypt Touch Dashboard, open the Excrypt Touch Menu, by touching the vertical black bar on the right side of the screen and swiping left.
2
In the Excrypt Touch menu, select the User Management icon in the upper-right corner.
3
In the User Management drop-down menu, select Login.
4
Log in with the default admin identities.
A message appears at the top of the screen indicating whether the authentication succeeded.
5
Open the Excrypt Touch Menu again and select the Settings icon, represented by a gear symbol.
6
Select System Information in the Settings drop-down menu.
7
In the Excrypt Touch System Information window, scroll down to the Serials section and note the HSM serial number of the device.

​
Enable Excrypt Touch connectivity

Perform the following steps to enable Excrypt Touch connectivity and whitelist it:
1
Log in to the KMES Series 3 application interface with the default admin identities.
2
Go to Configuration> Network Options> TLS/SSL Settings.
3
Select the Connection drop-down option and select the Excrypt Touch connection pair.
4
Enable the Excrypt Touch connection pair if it is not already enabled.
5
Uncheck Use System/Host API SSL Parameters if it is checked.
6
Change the Cert Type to ECC.
7
Check the Use Futurex Certificates box.
8
Go to the Whitelist tab.
9
Check the Whitelist box, then select [ Add ].
10
In the Whitelist Remote Serial window, enter the serial number that you noted for the Excrypt Touch, then select [ OK ].
11
Select [ OK ] again in the Network Options dialog to save the configuration settings.

​
Add SFTP or CIFS share

After you determine which share you need, perform the following steps to add the for either SFTP or CIFS:

​
Add an FTP or SFTP share

Perform the following steps to add an FTP or SFTP share:
1
Log in to the KMES Series 3 application interface with the default admin identities.
2
Go to Configuration> Options> Event Management> FTP Server.
3
In the FTP server field, enter the IP address of the FTP or SFTP server.
4
In the Server port field, leave the server port as the default value if using FTP. If using SFTP, set the SFTP port to 22.
5
In the User name field, enter the name of a user authorized to access the FTP or SFTP share.
6
In the Password field, enter the password for the user specified in the previous step.
7
Configure the Timeout (mins) field as needed. The default value is 15.
8
Optionally, enable and configure SFTP. Otherwise, leave the field unchecked to use FTP.
9
Select [ Apply ].
10
When notified that the FTP settings have been successfully updated, select [ OK ].
11
Select [ Send Test File ].
A message box informs you that the server has successfully sent the test file.
12
Select [ Save ] in the main Options dialog to finish.

​
Add a CIFS share

1
Log in to the KMES Series 3 application interface with the default admin identities.
2
Go to Configuration> Options> Event Management> CIFS Server.
3
In the CIFS server field, enter the IP address of the CIFS server.
4
In the Server port field, leave the server port set to the default value.
5
In the Server Folder field, enter the Windows name of the CIFS share.
6
In the User name field, enter the name of a user authorized to access the CIFS share.
7
In the Password field, enter the password for the user specified in the previous step.
8
Select [ Apply ].
9
When notified that the CIFS settings have been successfully updated, select [ OK ].
10
Select [ Send Test File ].
A message box informs you that the server has successfully sent the test file.
11
Select [ Save ] in the main Options window to finish.

​
Set security options

Perform the following steps to set global password security options:
1
Log in to the KMES Series 3 application interface with the default admin identities.
2
Go to Configuration> Password Security.
3
In the Password Security window, configure as needed. There are options for the following settings:
  • Brute Force Protection
  • Password History
  • Password Expiration
  • Password Charset Restriction
  • Session Timeout
4
Select [ Save ].