Patent ID: 7302487

Claim:
Method for setting up a secured communications network, which network comprises at least two security nodes connected to a packet data network, comprising at least the steps of producing configuration information for the security nodes, encrypting at least a part of configuration information, digitally signing said at least a part of configuration information, storing said encrypted and digitally signed configuration information in a memory means accessible to a distribution entity inserting a part of configuration information corresponding to at least one of said at least two security nodes into a certain hardware token, storing a public and secret key pair in the hardware token for use in authenticating the security nodes and for decryption of configuration information, storing a certificate in the hardware token for authenticating a management entity and checking of a digital signature of the configuration data, reading of configuration information from said certain hardware token by said at least one security node, obtaining the rest of produced configuration information for said at least one security node by said at least one security node on the basis of data read from said certain hardware token, setting of communication parameters within said at least one security node on the basis of said obtained configuration information.