Issue:
Users have a Network Management Card (NMC) and do not wish to expose it to the internet, or for other reasons must keep devices on the same network as their NMC from accessing the internet

Product:
Network Management Card 3 devices (AP9640/AP9641/AP9643)
Devices that use an embedded NMC3, including but not limited to certain model rack PDU/ATS manufactured after specific dates 2022
Devices that support v3.x+ NMC3 firmware, and can use the Secure NMC System Tool to upgrade
Secure NMC System Tool version 4.0

Solution:

To activate a Secure NMC subscription in an offline scenario, two instances of the Secure NMC System Tool need to be installed, on a PC connected to your air-gapped network, and on a PC with an outgoing internet connection.

Add Devices

1. Install the Secure NMC System (SNS) Tool on a PC on your air-gapped network.
2. Launch the SNS Tool and add your NMCs into the Tool, as described in the SNS Tool User Guide.
3. Once all the NMCs have been added, click the Options button on the upper right-hand corner and click Export Application Data.
4. Select all Devices, select Export File Type: CSV File or SNST Bundle, and click Export.

• CSV option exports the minimal amount of device data required for licensing and downloading firmware.
  
  
• SNST Bundle option exports all device details, licenses and firmware.

Select the export file type appropriate for your air-gapped environment policies.

5. The exported application data will contain sensitive information like the NMC username and password, and the export file must be password-protected and stored securely.

Enter a strong password for this file and click Confirm.

6. Select where to securely store this file and click Save.
7. Install the Secure NMC System (SNS) Tool on a PC with an outgoing internet connection and move the downloaded export file to this PC.
8. Launch the SNS Tool as normal and click the Options button on the upper right-hand corner and click Import Application Data.
9. Select the CSV or SNST Bundle file that was exported from the air-gapped setup in step 4, and click Import.
10. Select all Devices and click Import.

License Devices

11. Select all devices from the Device List and click License Devices.
12. Click Check License. If you have a 1-year included subscription or a previously activated subscription, the SNS Tool will retrieve the license details.
13. If your NMC does not have an included subscription or is not already licensed, click Continue and enter the Activation ID from your purchased Secure NMC subscription.
14. Click Confirm and Activate.

Update Firmware

15. To update the firmware for your NMCs, go to Update Firmware > Download Only to download the latest firmware files available for your devices.
16. The downloaded firmware will be available in :

• Windows:
  C:\Users\<User>\AppData\Local\Schneider Electric\SecureNMCSystemTool
• Linux:
  /home/<user>/.local/share/Schneider Electric/SecureNMCSystemTool
• MacOS:
  /Users/<user>/Library/Application Support/Schneider Electric

Update Air-gapped Network Devices

1. On the PC with an outgoing internet connection where your devices have been licensed and firmware updated (steps 7-16), select all Devices, Licences and Firmware, select Export File Type: SNST Bundle, and click Export.
   
   
2. Transfer the SNST Bundle file to your air-gapped SNS Tool environment according to your local policies and guidelines.
   
   
3. In the air-gapped environment, launch the SNS Tool as normal and click the Options button on the upper right-hand corner and click Import Application Data.Select the SNST Bundle file that was exported from the internet-connected setup in step 18 and click Import.
   
   
4. Select all devices and click Import. NMC device information, firmware and licenses are successfully updated.

게시 대상: 슈나이더 일렉트릭 Korea