Lifetime Key Management Software Installer

To set up a new DataFort system with automated backup and archiving of encryption keys and Cryptainer information, set up a Lifetime Key Management (LKM) server and install LKM software before initializing DataFort, as described below. If you install the LKM system after you have initialized a DataFort, one or more DataFort configurations may have to be loaded into LKM manually.

LKM Server Requirements

Select a computer (the LKM server) to use for running LKM software and permanently storing archives of DataFort configurations. The LKM server should be dedicated to Key Management and Data Recovery. Using a Management Station as an LKM server is not recommended.

The server should be current on security patches and have unnecessary services disabled or removed. Logons should be limited to authorized administrators, with no remote management enabled. The LKM server should not be used to browse untrusted websites or run unverified code.

System Requirements

  • A connection to the Ethernet network that is accessible from the Clients NIC of DataForts in the same security domain.
  • Windows 2000 Server or Windows 2003 Server operating system (preferred); a dedicated Windows 2000 or Windows XP workstation (acceptable)
  • 2GB free disk space for the MySQL database
  • 512MB RAM
  • 1GHz processor
  • Available USB port for the smart card reader from Decru
  • CD drive for installing software
  • Internet Explorer v6.0 or later

Setting Internet Explorer

For password security, it is good practice to set Internet Explorer not to auto-fill or cache usernames and passwords.

Backup LKM Server

This version supports automated configuration backups to two LKM servers, a primary LKM server and an optional secondary backup server. The secondary server can be at a remote site. To use a backup LKM server, set it up just as you do the primary LKM server, and note its IP address.

Preparing the LKM Server

Assign a fixed IP address to the LKM server and make a note of it. You will need the IP address when you configure each DataFort appliance in the same domain for automated backups.

Automated backups and data transfers between the DataFort and the LKM server use the LKM server's ports 15362 and 15363 by default. If these ports are already in use, see the Lifetime Key Management Guide for instructions to change this setting.

Installing the LKM Application and Supporting Software

Install the LKM application and supporting software on the LKM as follows (see the Lifetime Key Management Guide for details:

  1. Insert the DataFort CD in a drive on the LKM server. The CD will run automatically.
  2. Click the Lifetime Key Management installer link. When prompted by the File Download screen to open or save the file, click the Open button to open the file.
  3. Follow the prompts to start the installer and accept the terms of the license agreement.
  4. Enter the LKM license key provided by Decru and click Next.
  5. Click next to allow the system to be checked for software requirements.
  6. Specify the installation directory or use the default. Click Next.
  7. Click Install to begin installation.
  8. Specify the MySQL data directory or use the default. Click Next. Note: The MySQL software and datastore (the database files) must be in a local or mounted directory, and not specified in the UNC (Universal Naming Convention) format.
  9. Follow the prompts to start the smart card reader installer.
  10. Accept the license agreement, and select the model number of your smart card reader. The model number can be found on the underside of the smart card reader (i.e. GemPC413-SL).
  11. When prompted, connect the smart card reader to a USB port on the LKM server.
  12. Select the “Yes, I want to restart my computer now” radio button on the LKM installer page and click Finish to complete installation.
  13. After the LKM server reboots, the LKM Service starts automatically. Click the LKM desktop icon or select Start > Programs > Decru > Lifetime Key Management to view LKM.
The Lifetime Key Management System is configured to start when the LKM server boots up, and will continue to run as a service after the server administrator logs out of the server. For more information on running the software, and on configuring DataFort to back up configurations to the LKM server (automatically or manually), see the Lifetime Key Management Guide and the DataFort Administration Guide.

Lifetime Key Management Software Installer

Netscape users: Launch setup.exe from /Installers/LKM/

Copyright 2006, Decru, Inc.