cfg-pushntp

cfg-pushntp -a ADDR [-p PORT -k -m MODULE] -1 ADDR [-2 ADDR -3 ADDR] enable
cfg-pushntp -a ADDR [-p PORT -k -m MODULE] disable

Configures time synchronisation on the nShield HSM, using NTP. Enables or disables NTP time synchronization on the specified HSM. When enabling NTP synchronization, the IP addresses of up to 3 NTP servers may be specified.

The new NTP settings will take effect the next time the target HSM is restarted.
Option Description

-1, --ntp1=ADDR

IP address of NTP server.

nShield 5c: This can be an IPv4 or an IPv6 address.

-2, --ntp2=ADDR

IP address of NTP server.

nShield 5c: This can be an IPv4 or an IPv6 address.

-3, --ntp2=ADDR

IP address of NTP server.

nShield 5c: This can be an IPv4 or an IPv6 address.

disable

Disables the NTP service on the HSM.

enable

Enables the NTP service on the HSM.

-a, --address=ADDR

IP address of nShield HSM to configure NTP on.

nShield 5c: This can be an IPv4 or an IPv6 address, or it can be a hostname that resolves to the HSM’s IP address.

-k, --use-kneti

Uses KNETI to authenticate.

-m, --module=MODULE

Sets the HSM to use for KNETI authentication. The default is HSM 1. This option can only be used with the --use-kneti option.

-p, --port=PORT

Sets the port to use to connect to the nShield HSM (default=9004).

Help options

-h, --help

Displays help for cfg-pushntp.

-u, --usage

Displays a brief usage summary for cfg-pushntp.

-v, --version

Displays the version number of the Security World Software that deploys cfg-pushntp.

Example

Linux
cfg-pushntp --address=192.30.100.150 --ntp1=192.23.24.256 enable
Windows
cfg-pushntp.exe --address=192.30.100.150 --ntp1=192.23.24.256 enable

Returns:

The requested NTP configuration changes have been uploaded and will take effect when the target nShield HSM is restarted.