Converting a Photon 100 to a Security Data Sensor

This topic describes how to use the sensor CLI to convert an existing Photon 100 sensor with its Modular Data Sensor capabilities to a Security Data Sensor with the malware sandbox and IDS features enabled. During this procedure, you can either preserve the existing Engine ID for the sensor or create a new one.

Use the following procedure:

  1. Open a terminal window with the Photon 100. Depending on where you are in the configuration procedure for the Photon 100, you can use any of the following techniques:

    • SSH connection to the Management port (LAN1). Available if you have already configured IP settings for the Photon 100's Management port.
    • Directly connected HDMI monitor and USB keyboard.
    • RS-232 terminal connected to the RJ-45 COM port.

  2. Log in with your administrator credentials. If this is your first time logging in to the Photon 100, the default username and password are aella and changeme.

    The prompt appears as DataSensor>

  3. You use the set feature sds [new-engid] command to change the Photon 100 from a Modular Data Sensor to a Security Data Sensor. The new-engid parameter is optional and determines whether the existing Engine ID is preserved or a new one is generated:

    • set feature sds – The sensor is converted to a Security Data Sensor with its existing Engine ID intact.

    • set feature sds new-engid – The sensor is converted to a Security Data Sensor with a new Engine ID.

      You can see the new Engine ID with the show engid_encoding command.

  4. The system informs you that it will be restarted and asks you to confirm the change. Press y to confirm the change.

    The system applies changes and restarts the sensor. If you were connected via SSH, the connection is lost when the change is applied. Wait a few minutes and reconnect to the sensor.

    When you reconnect, the show ver command now reports Running Feature as sds.