Managing Luna HSM Partitions

This section describes how to manage Luna HSM partitions on CCKM.

Before proceeding, make sure to fulfill prerequisites.

Adding Luna HSM Partitions

To add a Luna HSM partition to CCKM:

1. Log on to the CipherTrust Manager GUI as administrator.

2. Open the Cloud Key Manager application.

3. In the left pane, click KMS Containers > Luna HSM Partitions. The Luna HSM Partitions page is displayed.

4. Click Add Partition. The Add Existing Partition page is displayed.

5. From the Select Connection drop-down list, select the desired connection.

6. Click Add.

The Luna HSM partition is added to CCKM.

A message partition added successfully... is displayed on the screen.

Refreshing Luna HSM Keys

Refreshing is the process of downloading keys created on the Luna HSM partitions to CCKM. Refresh can be achieved using any of the following ways:

• Refreshing Specific Partitions

• Refreshing All Partitions

Refreshing Specific Partitions

To refresh a specific partition:

1. Open the Cloud Key Manager application.

2. In the left pane, click KMS Containers > Luna HSM Partitions. The Luna HSM Partitions page is displayed. This page displays the list of Luna HSM partitions.

3. Click the overflow icon () corresponding to the desired Luna HSM partition and click Refresh Now.

A message Refresh started... is displayed on the screen.

After successful refresh, the refreshed keys are listed on the Cloud Keys > Luna > Luna Keys page. Refer to Viewing Luna HSM Keys for details.

Refreshing All Partitions

To refresh all Luna HSM partitions:

1. Open the Cloud Key Manager application.

2. In the left pane, click KMS Containers > Luna HSM Partitions. The Luna HSM Partitions page is displayed. This page displays the list of Luna HSM partitions.

3. Click Refresh All. The "This may take a while..." message is displayed.

   Note

   Refreshing all Luna HSM partitions is a time intensive operation that could take several hours or days to complete. It will continue running in the background.

4. Click Refresh All to continue.

A message Refresh started... is displayed on the screen. To cancel the refresh, click Cancel Refresh.

The refreshed keys are listed on the Cloud Keys > Luna > Luna Keys page. Refer to Viewing Luna HSM Keys for details.

Syncing All Partitions

Syncing is the process of synchronizing keys in Luna HSM partitions. After successful sync, the partitions have the synced Luna HSM keys. Syncing is useful for Luna HSM partitions in the High Availability (HA) mode.

To synchronize all Luna HSM partitions:

1. Open the Cloud Key Manager application.

2. In the left pane, click KMS Containers > Luna HSM Partitions. The Luna HSM Partitions page is displayed. This page displays the list of Luna HSM partitions.

3. Click Sync All. The "This may take a while..." message is displayed.

   Note

   Synchronizing all Luna HSM partitions is a time intensive operation that could take several hours or days to complete. It will continue running in the background.

4. Click Sync All to continue.

A message Sync started... is displayed on the screen. To cancel the sync, click Cancel Sync.

The synchronized keys are listed on the Cloud Keys > Luna > Luna Keys page. Refer to Viewing Luna HSM Keys for details.

Viewing/Editing Details of Luna HSM Partitions

The Luna HSM Partitions page shows the list of existing Luna HSM partitions. Search for partitions by Partition ID, Connection, or Label.

Viewing Luna HSM Partitions Details

To view the details of Luna HSM partitions:

1. Open the Cloud Key Manager application.

2. In the left pane, click KMS Containers > Luna HSM Partitions. The Luna HSM Partitions page displays the following details.

   Column	Description
   Partition ID	ID of the partition. Click the link to view more details about the partition.
   Label	Label of the Luna HSM partition.
   Firmware	Firmware running on the Luna HSM partition.
   HA Enabled	Whether high availability (HA) is enabled () on the Luna HSM partition. For partitions that do not have HA enabled, is displayed.
   Connection	Name of the connection.
   Last Refreshed	When the partition was last refreshed. Never is displayed for partitions that are never refreshed.
   Model	Model of the Luna HSM partition. By default, this column is not visible. Click the Customize View () icon, select Model, and click OK to display the column.

Modifying Luna HSM Partition Details

To modify the details of a Luna HSM partition:

1. Open the Cloud Key Manager application.

2. In the left pane, click KMS Containers > Luna HSM Partitions. The Luna HSM Partitions page displays the list of added Luna HSM partitions.

3. Click the overflow icon () corresponding to the desired Luna HSM partition and click View/Edit Details.

   You can change the Luna HSM connection and modify user/group permissions on the Luna HSM partition. For details, refer to:

   • Changing the Luna HSM Connection

   • Managing User Permissions on Luna HSM Partitions

Changing the Luna HSM Connection

To change the Luna HSM connection:

1. Expand Connection.

2. From the Connection ID drop-down list, select the desired Luna HSM connection.

3. Click Update.

A message Updated connection for this partition is displayed on the screen.

Managing User Permissions on Luna HSM Partitions

To work with Luna HSM, users/groups must have the minimum set of permissions that allow them to use the Luna HSM resources such as Luna HSM keys and partitions. Initially, the user only has permission to view the keys. However, if required, the CCKM administrator can grant and revoke permissions.

To add permission for a user/group:

1. In the Access Control section, click Assign User/Group.

2. On the Assign User/Group screen, select the user or group to be assigned permissions from the User/Group drop-down list.

3. Click Save.

The newly added user/group is displayed under Name in the Access Control section.

CCKM allows the following operations on the Luna HSM partitions:

• View Keys, Create Key, Edit Key, Sync Key, and Delete Key

• Refresh Partition, Sync Partition

• Unassign

Granting Permission to Perform an Operation

To grant permissions to the user or group to perform any of the above mentioned operations:

1. Select the check box under the desired operation corresponding to the desired users or groups.

2. Click Update.

A message Updated access control for this partition is displayed on the screen.

Removing a Permission

To remove a permission assigned to a user or group:

1. Clear the check box under the desired operation corresponding to the desired users or groups.

2. Click Update.

A message Updated access control for this partition is displayed on the screen.

Removing Permission from a User/Group

To remove current permissions assigned to the user/group:

1. Under Unassign, click the X button corresponding to the desired user/group.

2. On the Unassign User / Unassign Group screen, click Unassign.

   Note

   Unassigning this user/group will remove all permissions currently assigned to the user/group. Are you sure you want to continue?

3. Click Unassign.

A message Updated access control for this key partition is displayed on the screen.

Deleting Luna HSM Partitions

To delete a Luna HSM partition:

1. Open the Cloud Key Manager application.

2. In the left pane, click KMS Containers > Luna HSM Partitions. The Luna HSM Partitions page displays the list of added Luna HSM partitions.

3. Click the overflow icon () corresponding to the desired Luna HSM partition and click Delete.

4. On the Delete Luna HSM Partition screen, select I wish to delete this partition.

5. Click Delete Partition.

A message Luna HSM partition deleted is displayed on the screen.