# Save the initial configuration and generate the one-time password

Save the initial configuration to establish a management connection for Security Engines.

##

Saving the initial configuration generates the one-time password required for manual configuration using the Security Engine Configuration Wizard. You can alternatively upload the configuration details to the Installation Server or save them, for example, on a USB drive.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Select Dashboard > Engines Dashboard.
2. Save the initial configuration information:
   - For an individual Security Engine node, right-click the node, then select Save Initial Configuration.
   - For all the Security Engines in a cluster, right-click the top-level cluster element, then select Configuration > Save Initial Configuration.
3. To manually enter details in the Security Engine Configuration Wizard or if the engine already has the correct configuration, select View Details, then write down the one-time password.
4. Configure the settings.

## Next steps

- If you selected to upload the initial configuration to the Installation Server, connect the cables, then turn on the appliance. The appliance contacts the Installation Server and downloads the initial configuration.
- To configure the appliance automatically using a USB drive, turn on the appliance with a USB drive inserted.
- If you manually saved the details, turn on the appliance and import the configuration to the Security Engine Configuration Wizard.

For more information, see the Forcepoint Network Security Platform Installation Guide.

## Save or Upload Initial Configuration dialog box

Use the information in the following table when you want to save the initial configuration of an Security Engine.

Option | Definition
--- | ---
View Details | Opens the Initial Configuration Details dialog box. You can view and copy the one-time password that secures communication between the Management Server and the Security Engine.
Initial Security Policy (Optional) | The policy to be installed automatically. Click Select to select an element.
Local Time Zone | Select a local time zone for commands you enter on the command line. Note: This setting only applies to the local console. Security Engines always use UTC (GMT) time internally. The clock on the local console is automatically synchronized with the Management Server time.
Keyboard Layout | Select a language to specify the layout of the keyboard used with the local console.
Enable SSH Daemon (Optional) | When selected, allows remote access to the Security Engine command line for troubleshooting purposes. You can enable and disable remote command-line access at any time after management contact is established through the right-click menu of the Security Engine. We recommend that you disable SSH access whenever it is not needed. Make sure that your Access rules allow SSH access to the Security Engines from the administrators’ IP addresses only. The Template policies do not allow these connections. However, the temporary policy activated immediately after the Security Engine's initial configuration (active until you install the working policy) allows SSH access from the Management Server’s IP address. Alternatively, you can upload a working policy to be automatically installed after it has contacted the Management Server. CAUTION: If you enable SSH, set the password for command-line access after the initial configuration either through the SMC Client or by logging on to the command line. When the password is not set, anyone with SSH access to the Security Engine can set the password.
USB Drive Installation | Click Save As to save the configuration file to a USB drive. When you turn on the Security Engine appliance with the USB drive inserted, it automatically imports and installs the initial configuration and makes initial contact with the Management Server.
Installation Cloud (Plug-and-play configuration method, only Single Engines that have a dynamic control IP address) | Click Upload to upload the initial configuration to the Installation Server. When you turn on the Security Engine appliance, it automatically downloads and installs the initial configuration and makes initial contact with the Management Server. Note: There are special considerations when using plug-and-play configuration. For example, both the SMC and the Security Engines must be registered for plug-and-play configuration before you configure the engines. See Knowledge Base article 8248.
Manual Installation | Select from the following options. Copy to Clipboard — Copies the configuration details to the clipboard. Save As — Opens the Save Initial Configuration dialog box, where you can specify where to save the file that contains the configuration details.

## Initial Configuration Details dialog box

Use this dialog box to view and copy the initial configuration details.

Option | Definition
--- | ---
Engine Node | Shows the name of the selected Security Engine node.
One-Time Generated Password | Shows the one-time password required when the Security Engine connects to the Management Server. To copy the password, right-click the password, then select Copy Password. The password is required when the Security Engine is configured manually using the Security Engine Configuration Wizard.
Management Server Addresses | The IP address of the Management Server that the Security Engine contacts after the initial configuration.
Management Server Certificate Fingerprint | The certificate fingerprint that secures Management Server communications.