Using the FoD Key on an IOM/Switch for a portable target system

The following procedure describes how to display the FoD information of the target system, and how to install or uninstall the FoD license key(s) using in-band (IB) or out-of-band (OOB) mode.

The following prerequisites are necessary for this task:

The DSA Portable Edition is available on a removable medium (for example, a CD-ROM or a USB key) as a self-extracting file.
The operating system on a laptop is available for OOB mode.
DSA has internet access. The commands report_switch_active_fod, install_switch_fod, and uninstall_switch_fod require Internet access.

Insert the removable medium with DSA Portable Edition into the laptop.
Start the DSA Portable Edition executable on the removable medium.
Enter the following command and parameters that indicate the remote key repository (Switch) and the default value for its local Switch device.
```
DSA fod report_switch_active_fod --host <userid:password@hostip:[port] |
 --tftp <userid:password@ip:[port]>] | [--commnuity <commnuity>] |
 [--authproto<MD5/SHA>] | [--privpasswd <password>] 
```
The definitions of the parameters are:

--host <userid:password@hostip:[port]>

The remote key repository (Switch).

--tftp <ip:[port]>

The TFTP server for Switch SNMP interface.

--commnuity <commnuity>

The community for SNMPv1 and SNMPv2.

--authproto<MD5/SHA>

Authorization protocol for SNMPv3.

--privpasswd <password>

The privacy password for SNMPv3.

The active FoD feature(s) for the key repository are displayed in the console.
Enter the following command and parameters to download specific keys for corresponding FoD features from KMS and installed on the target system (Switch repository):
```
DSA fod install_switch_fod --ibmid <userid:password> |
 --uid <unique_id> | --authcode <code> | --mt <machinetype> |
 --host <userid:password@hostip:[port]> | --tftp <ip:[port]> |
 --commnuity <commnuity> | --authproto<MD5/SHA> | -privproto <DES/AES> |
 --privpasswd <password>
```
The definitions of the parameters are:

--ibmid <userid:password>

The KMS ID credential for the Lenovo Web site.

--uid <unique_id>

The unique identifier information of the FoD feature.

--authcode <code>

Authentication code for FoD features.

--mt <machinetype>

The machine type of target system (Switch).

--host <userid:password@hostip:[port]>

The remote key repository (Switch).

--tftp <ip:[port]>

The TFTP server for Switch SNMP interface.

--commnuity <commnuity>

The community for SNMPv1 and SNMPv2.

--authproto<MD5/SHA>

Authorization protocol for SNMPv3.

-privproto <DES/AES>

The privacy protocol for SNMPv3; default is: No privacy.

--privpasswd <password>

The privacy password for SNMPv3.
Enter the following command and parameters to uninstall the FoD key from the target system (Switch repository):
```
DSA fod uninstall_switch_fod --keyid <keyid> |
 --host <userid:password@hostip:[port]> | --tftp <ip:[port]> |
 [--commnuity <commnuity>] | [--authproto<MD5/SHA>] |
 -privproto <DES/AES> | [--privpasswd <password>]
```
The definitions of the parameters are:

--keyid<Keyid>

This is obtained from the command DSAfod_report_switch_active_fod.

--host <userid:password@hostip:[port]>

The remote key repository.

--tftp] <ip:[port]>

The TFTP server for Switch SNMP interface.

--commnuity <commnuity>

The community for SNMPv1 and SNMPv2.

--authproto<MD5/SHA>

Authorization protocol for SNMPv3.

-privproto <DES/AES>

The privacy protocol for SNMPv3; default is: No privacy.

--privpasswd <password>

The privacy password for SNMPv3.

If DSA fails to connect to Switch, the following error message is displayed: Failed to connect Switch, Error code = **.