Configure KMES Series 3

this section describes the kmes configuration steps necessary to establish connectivity with the excrypt touch and mount to the sftp or cifs share retrieve excrypt touch serial number from the excrypt touch dashboard , open the excrypt touch menu , by touching the vertical black bar on the right side of the screen and swiping left in the excrypt touch menu, select the user management icon in the upper right corner in the user management drop down menu, select login log in with the default admin identities a message appears at the top of the screen indicating whether the authentication succeeded open the excrypt touch menu again and select the settings icon, represented by a gear symbol select system information in the settings drop down menu in the excrypt touch system information window, scroll down to the serials section and note the hsm serial number of the device enable excrypt touch connectivity and whitelist log in to the kmes series 3 application interface with the default admin identities go to configuration > network options > tls/ssl settings select the connection drop down option and select the excrypt touch connection pair enable the excrypt touch connection pair if it is not already enabled uncheck use system/host api ssl parameters if it is checked change the cert type to ecc check the use futurex certificates box go to the whitelist tab check the whitelist box, then select \[ add ] in the whitelist remote serial window, enter the serial number that you noted for the excrypt touch, then select \[ ok ] select \[ ok ] again in the network options dialog to save the configuration settings add sftp or cifs share after you determine which share you need, perform the following steps to add the for either sftp or cifs add an ftp or sftp share log in to the kmes series 3 application interface with the default admin identities go to configuration > options > event management > ftp server in the ftp server field, enter the ip address of the ftp or sftp server in the server port field, leave the server port as the default value if using ftp if using sftp, set the sftp port to 22 in the user name field, enter the name of a user authorized to access the ftp or sftp share in the password field, enter the password for the user specified in the previous step configure the timeout (mins) field as needed the default value is 15 optionally, enable and configure sftp otherwise, leave the field unchecked to use ftp select \[ apply ] when notified that the ftp settings have been successfully updated, select \[ ok ] select \[ send test file ] a message box informs you that the server has successfully sent the test file select \[ save ] in the main options dialog to finish add a cifs share log in to the kmes series 3 application interface with the default admin identities go to configuration > options > event management > cifs server in the cifs server field, enter the ip address of the cifs server in the server port field, leave the server port set to the default value in the server folder field, enter the windows name of the cifs share in the user name field, enter the name of a user authorized to access the cifs share in the password field, enter the password for the user specified in the previous step select \[ apply ] when notified that the cifs settings have been successfully updated, select \[ ok ] select \[ send test file ] a message box informs you that the server has successfully sent the test file select \[ save ] in the main options window to finish set global password security options log in to the kmes series 3 application interface with the default admin identities go to configuration > password security in the password security window, configure as needed there are options for brute force protection , password history , password expiration , password charset restriction , and session timeout select \[ save ]