Installation, Maintenance, and Upgrade

Replace the SSD

The Firepower 1100 ships with an SSD installed. You can replace this SSD should it fail. Before replacing the SSD, you must power off the chassis by pressing the power switch on the rear panel.


Caution
You will lose your configuration after you replace the existing SSD with a new SSD.

Follow these steps to replace an SSD in the chassis:

Procedure

Step 1

Loosen the thumb screws on both sides of the SSD bay and pull the existing SSD out of the bay.

Step 2

Insert the new SSD into the bay and push it in until it is seated.

Figure 1. Remove and Install an SSD

Step 3

Tighten the thumb screws on both sides of the SSD bay.

Step 4

Check the SSD LED to make sure the SSD is seated properly and functioning. See Rear Panel LEDs for a description of the SSD LED.

Install the FIPS Opacity Shield in a Two-Post Rack


Note

Because the FIPS opacity shield covers the serial number on the chassis, the CO should copy the serial number and store it in a secure place. The serial number is needed when you call Cisco TAC.

Before you begin


Caution

This procedure should be performed only by the Crypto Officer (CO).

You need the following items to install the FIPS opacity shield:

  • #1 Phillips screwdriver

  • The following items from the FIPS kit (part number 800-105495-01):

    • One FIPS opacity shield (part number 69-100612-01)

    • Two cable management brackets (part number 700-117013-01)

    • Eight Phillips 8-32 x 0.375-inch screws (part number 48-0629-01) used to attach the FIPS opacity shield to the cable management brackets

    • Ten Tamper Evidence Labels (TEL) (part number 47-25553-01)


      Note

      The TELs are made of a special thin gauge vinyl with self-adhesive backing. Once the CO attaches them on the chassis, any attempt to open the chassis damages the TELs or the chassis cover. Because the TELs have nonrepeated serial numbers, the CO can inspect them for damage and compare them against the applied serial numbers to verify whether the chassis has been tampered with. TELs with curled corners, rips, and slices indicate tampering. The word “FIPS” or “OPEN” may appear if the label has been peeled back.

Procedure

Step 1

Copy the serial number and store in a secure place. To find the serial number, see Serial Number Location.

Step 2

Perform the Step 1 as described in Rack-Mount the Chassis.

Step 3

Install the cable management brackets.

Figure 2. Install the Cable Management Screws into the Rack-Mount Bracket

Step 4

Connect the cables to the ports. Make sure that the cables have enough slack to route them through the cable mounting brackets.

Note

 

If you are installing the FIPS opacity shield after the initial product installation, the cables are connected. If the attached cables do not have enough slack to route them through the cable mounting brackets (as shown in the figure below), you will have to turn the power off on the appliance, remove the cables, route the cables through the cable mounting brackets, reattach the cables, and continue with Step 5 below.

Note

 

When you toggle the power switch from ON to OFF, it takes several seconds for the system to power down. Do not remove the power cable until the power LED is off. After removing power from the chassis either by moving the power switch to OFF or unplugging the power cord, wait at least 10 seconds before turning power back ON.

Step 5

Route the cables through the openings in the cable management brackets as shown in the figure below.

Step 6

Attach the FIPS opacity shield to the cable management brackets using four of the 8-32 x 0.375-inch Phillips screws provided in the FIPS kit as shown in the figure below.

Figure 3. Install the FIPS Cover

1

FIPS opacity shield

2

8-32 x 0.375-inch Phillips screws (two per side)

3

Cable management bracket

—

Step 7

Before you attach the TELs, clean the chassis and FIPS cover of any grease, dirt, or oil with alcohol-based cleaning pads .

Step 8

Attach seven of the TELs. See the figure below for the correct placement. Allow the TELs to cure for a minimum of 12 hours.

Caution

 

Any deviation in the placement of the TELs means the chassis is not in FIPS mode.

Figure 4. TELs Placement on the Chassis

1

TEL 1 on the left side and top of chassis

2

TEL 2 on the right side and top of chassis

3

TEL 3 on the top and back of chassis

4

TEL 4 across the FIPS shield and the chassis (towards the left of the chassis)

5

TEL 5 across the FIPS shield and the chassis (towards the right of the chassis)

6

TEL 6 on the bottom of the chassis towards the left side of the chassis

7

TEL 7 on the bottom of the chassis towards the right side of the chassis

—

Step 9

Attach the power cable to the chassis and connect it to an electrical outlet.

Step 10

Press the power switch on the rear panel.

Step 11

Check the power LED on the front panel. See Rear Panel LEDs for a description of the power LED. Solid green indicates that the chassis is powered on.

Step 12

Place the chassis in FIPS mode.

See the following procedures for how to place the chassis in FIPS mode:

What to do next

See the Cisco Firepower 1100 Getting Started Guide for further configuration information.