nShield 5c 10G maintenance

The nShield 5c 10G contains the following user-maintainable and replaceable parts:

Breaking the security seal or dismantling the HSM voids your warranty cover, and any existing maintenance and support agreements.

Replace the PSUs (nShield 5c 10G)

The nShield 5c 10G contains two PSUs that accept mains voltage and output +5v and +12v.

Only remove one PSU at a time. If you want to replace both PSUs, make sure that the first one is correctly inserted and powered on before removing the second. The green indicator LED displays a constant light when the PSU is connected and powered on.

To replace a PSU:

  1. Disconnect the power cable.

  2. Use the securing lever to release the PSU.

  3. While holding the lever in place, pull the PSU out of the module.

  4. Slide the new PSU into the vacant slot.
    The securing lever clicks into place when the PSU is fully inserted.

  5. Replace the power cable.
    The green LED illuminates when the power is restored.

Replace the fans (nShield 5c 10G)

The nShield 5c 10G contains four fan modules that are situated at the front of the HSM. The fan modules are numbered from 1 to 4, with the left-hand fan being number 1 when viewed from the front of the unit. The fans are hot-swappable, meaning you can remove and replace them while the HSM is operational.

If a fan module fails, or when you remove a module to replace it, the other fans increase performance to maintain the required level of cooling.

Tools needed:

  • T10 screwdriver

To replace a fan module:

  1. Remove the two screws holding the fan cover in place.

  2. Pull the left-hand end of the cover towards you, and slide the cover to the left.

  3. Firmly pull the fan module out of the fan tray.

  4. Slide the new module into the vacant slot.

  5. Replace and resecure the cover.

Replace the battery (nShield 5c 10G)

When the low battery alert triggers, replace the battery module.

Do not remove the battery module for longer than 15 minutes at a time.

The replaceable battery maintains power to the critical functions of the HSM, for example, the RTC and tamper detection, in the event of a mains power failure. The HSM cannot run on this battery in the absence of mains power.

After removing the battery, you must insert the new one within 15 minutes.

To replace the battery:

  1. With your fingers, unscrew the screw securing the battery unit.

  2. Pull the battery unit towards you.

  3. Slide the new battery module into the vacant slot.

  4. Dispose of the old battery according to local regulations.

SFP+ transceivers

Entrust offer the following SFP+ transceivers:

  • 10GBase-T (copper) for use with Cat 6 or Cat 7 twisted-pair Ethernet cables with RJ45 connectors.

  • 10GBase-SR for use with Multimode (Short range) optical fibers with LC connectors.

  • 10GBase-LR for use with Single-mode (Long range) optical fiber with LC connectors.

For more information on the individual SFP+ transceivers, including insertion and removal, refer to the manufacturer’s documentation.

The nShield 5c 10G SFP+ ports are set up to enable the separation of HSM management and data, and provide redundancy for both, as required.

To update the port configuration, see [LINK]. Ensure that you plug the SFP+ transceivers and cables into the appropriate ports for your configuration as indicated by the following matrix:

Configuration Port 1 Port 2 Port 3 Port 4

Single port (default)

Management and data

Bonded

Management and data

Separated

Management

Data

Separated and bonded

Management

Data

Flash testing the nShield 5c 10G

The module is designed to comply with IEC/EN/UL 62368-1 but should be tested only by trained safety professionals. Because the module is fitted with radio frequency interference suppressors, it is recommended that only a DC test be performed.

Repeated application of the flash test can damage safety insulation.