> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure KMES Series 3

> Step-by-step guide to configure KMES Series 3 for Excrypt Touch connectivity and share mounting.

This section describes the KMES configuration steps necessary to establish connectivity with the Excrypt Touch and mount it to the SFTP or CIFS share.

## Retrieve the Excrypt Touch serial number

Perform the following steps to retrieve the Excrypt Touch serial number:

<Steps>
  <Step>
    From the **Excrypt Touch Dashboard**, open the **Excrypt Touch Menu**, by touching the vertical black bar on the right side of the screen and swiping left.
  </Step>

  <Step>
    In the Excrypt Touch menu, select the **User Management** icon in the upper-right corner.
  </Step>

  <Step>
    In the **User Management** drop-down menu, select **Login**.
  </Step>

  <Step>
    Log in with the default admin identities.

    <Check>
      A message appears at the top of the screen indicating whether the authentication succeeded.
    </Check>
  </Step>

  <Step>
    Open the **Excrypt Touch Menu** again and select the **Settings** icon, represented by a gear symbol.
  </Step>

  <Step>
    Select **System Information** in the **Settings** drop-down menu.
  </Step>

  <Step>
    In the **Excrypt Touch System Information** window, scroll down to the **Serials** section and note the HSM serial number of the device.
  </Step>
</Steps>

## Enable Excrypt Touch connectivity

Perform the following steps to enable Excrypt Touch connectivity and whitelist it:

<Steps>
  <Step>
    Log in to the KMES Series 3 application interface with the default admin identities.
  </Step>

  <Step>
    Go to **Configuration**> **Network Options**> **TLS/SSL Settings**.
  </Step>

  <Step>
    Select the **Connection** drop-down option and select the **Excrypt Touch** connection pair.
  </Step>

  <Step>
    Enable the Excrypt Touch connection pair if it is not already enabled.
  </Step>

  <Step>
    Uncheck **Use System/Host API SSL Parameters** if it is checked.
  </Step>

  <Step>
    Change the Cert Type to **ECC**.
  </Step>

  <Step>
    Check the **Use Futurex Certificates** box.
  </Step>

  <Step>
    Go to the **Whitelist** tab.
  </Step>

  <Step>
    Check the **Whitelist** box, then select **\[ Add ]**.
  </Step>

  <Step>
    In the **Whitelist Remote Serial** window, enter the serial number that you noted for the Excrypt Touch, then select **\[ OK ]**.
  </Step>

  <Step>
    Select **\[ OK ]** again in the **Network Options** dialog to save the configuration settings.
  </Step>
</Steps>

## Add SFTP or CIFS share

After you determine which share you need, perform the following steps to add the for either SFTP or CIFS:

### Add an FTP or SFTP share

Perform the following steps to add an FTP or SFTP share:

<Steps>
  <Step>
    Log in to the KMES Series 3 application interface with the default admin identities.
  </Step>

  <Step>
    Go to **Configuration**> **Options**> **Event Management**> **FTP Server**.
  </Step>

  <Step>
    In the **FTP server** field, enter the IP address of the FTP or SFTP server.
  </Step>

  <Step>
    In the **Server port** field, leave the server port as the default value if using FTP. If using SFTP, set the SFTP port to `22`.
  </Step>

  <Step>
    In the **User name** field, enter the name of a user authorized to access the FTP or SFTP share.
  </Step>

  <Step>
    In the **Password** field, enter the password for the user specified in the previous step.
  </Step>

  <Step>
    Configure the **Timeout (mins)** field as needed. The default value is `15`.
  </Step>

  <Step>
    Optionally, enable and configure SFTP. Otherwise, leave the field unchecked to use FTP.
  </Step>

  <Step>
    Select **\[ Apply ]**.
  </Step>

  <Step>
    When notified that the FTP settings have been successfully updated, select **\[ OK ]**.
  </Step>

  <Step>
    Select **\[ Send Test File ]**.

    <Check>
      A message box informs you that the server has successfully sent the test file.
    </Check>
  </Step>

  <Step>
    Select **\[ Save ]** in the main **Options** dialog to finish.
  </Step>
</Steps>

### Add a CIFS share

<Steps>
  <Step>
    Log in to the KMES Series 3 application interface with the default admin identities.
  </Step>

  <Step>
    Go to **Configuration**> **Options**> **Event Management**> **CIFS Server**.
  </Step>

  <Step>
    In the **CIFS server** field, enter the IP address of the CIFS server.
  </Step>

  <Step>
    In the **Server port** field, leave the server port set to the default value.
  </Step>

  <Step>
    In the **Server Folder** field, enter the Windows name of the CIFS share.
  </Step>

  <Step>
    In the **User name** field, enter the name of a user authorized to access the CIFS share.
  </Step>

  <Step>
    In the **Password** field, enter the password for the user specified in the previous step.
  </Step>

  <Step>
    Select **\[ Apply ]**.
  </Step>

  <Step>
    When notified that the CIFS settings have been successfully updated, select **\[ OK ]**.
  </Step>

  <Step>
    Select **\[ Send Test File ]**.

    <Check>
      A message box informs you that the server has successfully sent the test file.
    </Check>
  </Step>

  <Step>
    Select **\[ Save ]** in the main **Options** window to finish.
  </Step>
</Steps>

## Set security options

Perform the following steps to set global password security options:

<Steps>
  <Step>
    Log in to the KMES Series 3 application interface with the default admin identities.
  </Step>

  <Step>
    Go to **Configuration**> **Password Security**.
  </Step>

  <Step>
    In the **Password Security** window, configure as needed. There are options for the following settings:

    * **Brute Force Protection**
    * **Password History**
    * **Password Expiration**
    * **Password Charset Restriction**
    * **Session Timeout**
  </Step>

  <Step>
    Select **\[ Save ]**.
  </Step>
</Steps>