You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Tutorial: Use SSH to acess the payShield manager for your payment HSM
14
+
# Tutorial: Use SSH to access the payShield manager for your payment HSM
15
15
16
-
After you have [Created an Azure Payment HSM](create-payment-hsm.md), you can create a virtual machine on the same virtual network and use it to access the Thales payShield manager.
16
+
After you [Create an Azure Payment HSM](create-payment-hsm.md), you can create a virtual machine on the same virtual network and use it to access the Thales payShield manager.
17
17
18
18
In this tutorial, you learn how to:
19
19
@@ -23,7 +23,7 @@ In this tutorial, you learn how to:
23
23
> * Test Connectivity to your VM, and from the VM to your payment HSM
24
24
> * Log into the VM to access the payShield manager
25
25
26
-
To complete this tutorial, you will need:
26
+
To complete this tutorial you need:
27
27
28
28
- The name of your payment HSM's virtual network. This tutorial assumes the name used in the previous tutorial: "myVNet".
29
29
- The address space of your virtual network. This tutorial assumes the address space used in the previous tutorial: "10.0.0.0/16".
@@ -38,7 +38,7 @@ Create a subnet for your virtual machine, on the same virtual network as your pa
The Azure CLI [az network vnet show](/cli/azure/network/vnet/subnet#az-network-vnet-subnet-create) command will list two subnets associated with your VNet: the subnet with your payment HSM ("mySubnet"), and the newly created "myVMSubnet" subnet.
41
+
The Azure CLI [az network vnet show](/cli/azure/network/vnet/subnet#az-network-vnet-subnet-create) command lists two subnets associated with your VNet: the subnet with your payment HSM ("mySubnet"), and the newly created "myVMSubnet" subnet.
42
42
43
43
```azurecli-interactive
44
44
az network vnet show -n "myVNet" -g "myResourceGroup"
@@ -66,7 +66,7 @@ $vnet.Subnets.Add($vmSubnet)
66
66
Set-AzVirtualNetwork -VirtualNetwork $vnet
67
67
```
68
68
69
-
The Azure PowerShell [Get-AzVirtualNetwork](/powershell/module/az.network/get-azvirtualnetwork) cmdlet will now list two subnets associated with your VNet: the subnet with your payment HSM ("mySubnet"), and the newly created "myVMSubnet" subnet.
69
+
The Azure PowerShell [Get-AzVirtualNetwork](/powershell/module/az.network/get-azvirtualnetwork) cmdlet lists two subnets associated with your VNet: the subnet with your payment HSM ("mySubnet"), and the newly created "myVMSubnet" subnet.
Create a VM on your new subnet, using the Azure CLI [az vm create](/cli/azure/vm#az-vm-create) command. (In this example we will create a Linux VM, but you could also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure CLI](../virtual-machines/windows/quick-create-cli.md) with the details below.)
83
+
Create a VM on your new subnet, using the Azure CLI [az vm create](/cli/azure/vm#az-vm-create) command. (In this example we create a Linux VM, but you could also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure CLI](../virtual-machines/windows/quick-create-cli.md) with the details below.)
84
84
85
85
```azurecli-interactive
86
86
az vm create \
@@ -103,7 +103,7 @@ To create a VM on your new subnet, first set your credentials with the [Get-Cred
103
103
$cred = Get-Credential
104
104
```
105
105
106
-
Now create your VM using the Azure PowerShell [New-AzVm](/powershell/module/az.compute/new-azvm) command. (In this example we will create a Linux VM, but you could also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure PowerShell](../virtual-machines/windows/quick-create-powershell.md) with the details below.)
106
+
Now create your VM using the Azure PowerShell [New-AzVm](/powershell/module/az.compute/new-azvm) command. (In this example we create a Linux VM, but you could also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure PowerShell](../virtual-machines/windows/quick-create-powershell.md) with the details below.)
Copy file name to clipboardExpand all lines: articles/payment-hsm/access-payshield-manager.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,31 +13,31 @@ ms.date: 01/31/2024
13
13
14
14
# Tutorial: Use a VPN to access the payShield manager for your payment HSM
15
15
16
-
After you have [Created an Azure Payment HSM](create-payment-hsm.md), you can connect to its payShield manager through your browser.
16
+
After you [Create an Azure Payment HSM](create-payment-hsm.md), you can connect to its payShield manager through your browser.
17
17
18
-
To connect to payShield manager, you will need to have an on-prem standard PC with a supported web-browser, together with the USB connected payShield Manager Reader and payShield Manager smart cards. Users connect to the payShield 10K via HTTP(s) using a configured management NIC IP addres.
18
+
To connect to payShield manager, you need to have an on-premises, standard PC with a supported web-browser, together with the USB connected payShield Manager Reader and payShield Manager smart cards. Users connect to the payShield 10K via HTTP(s) using a configured management NIC IP address.
19
19
20
-
You will need minimum 5 smart cards (3 cards for a CTA set, 2 cards function as Left Key Card and Right Key Card) and one reader. Please see Thales's payShield 10K Installation and User Guide for the detail instructions.
20
+
You need a minimum of five smart cards (three cards for a CTA set, a Left Key Card and a Right Key Card) and one reader. See Thales's payShield 10K Installation and User Guide for the detailed instructions.
21
21
22
22
## Sample deployment scenarios
23
23
24
-
Here are are are two sample scenarios for connecting to payShield manager for your payment HSM.
24
+
Here are two sample scenarios for connecting to payShield manager for your payment HSM.
25
25
26
26
Sample deployment 1:
27
27
28
-
::image type="content" source="./media/access-payshield-sample-deployment-1.png" lightbox="./media/access-payshield-sample-deployment-1.png" alt-text="A sample deployment, allowing you to access the payShield manager for your payment HSM.":::
28
+
:::image type="content" source="./media/access-payshield-sample-deployment-1.png" lightbox="./media/access-payshield-sample-deployment-1.png" alt-text="A sample deployment, allowing you to access the payShield manager for your payment HSM.":::
29
29
30
30
Sample deployment 2:
31
31
32
32
:::image type="content" source="./media/access-payshield-sample-deployment-2.png" lightbox="./media/access-payshield-sample-deployment-2.png" alt-text="Another sample deployment, allowing you to access the payShield manager for your payment HSM.":::
33
33
34
-
To access payShield manager from your on-prem PC, directly connect to HSMMgmtNic private IP address (10.1.0.4)
34
+
To access payShield manager from your on-premises PC, directly connect to HSMMgmtNic private IP address (10.1.0.4)
35
35
36
-
:::image type="content" source="./media/access-payshield-browser.png" lightbox="./media/access-payshield-browser.png" alt-text="A screenshot showing a succesful connection to the payShield manager through a browser.":::
36
+
:::image type="content" source="./media/access-payshield-browser.png" lightbox="./media/access-payshield-browser.png" alt-text="A screenshot showing a successful connection to the payShield manager through a browser.":::
37
37
38
38
## Next steps
39
39
40
-
Once an HSM has been allocated and you can access payShield Manager, you will need to proceed to the steps for HSM commissioning, HSM configuration, and loading LMKs:
40
+
When you can access payShield Manager, proceed to the steps for HSM commissioning, HSM configuration, and loading LMKs:
41
41
42
42
1. Install the smart card reader driver.
43
43
1. Install the Thales browser extension and local application component.
@@ -46,7 +46,7 @@ Once an HSM has been allocated and you can access payShield Manager, you will ne
46
46
1. Generate and install LMKs.
47
47
1. Test the API.
48
48
49
-
Please follow Thales’s payShield 10K Installation and User Guide for the detail instructions, and contact Thales support if any issues.
49
+
Please follow Thales’s payShield 10K Installation and User Guide for the detailed instructions, and contact Thales support if there are any issues.
50
50
51
51
Microsoft maintains a base firmware across the fleet, you can check the base firmware version from the HSM allocated, or check the [support guide](support-guide.md). You must upgrade the firmware based on your requirements.
0 commit comments