(Not for Luna HSM 7)

(Not for Luna HSM 7) This option allows you to generate MofN authentication splits, or secret shares. You can generate up to 16 shares (N), and you can specify how many of these shares are needed (M) in order to activate the token (up to 16).

(Not for Luna HSM 7) This option allows you to authenticate yourself to the token using MofN secret shares generated by option (73) Generate MofN. You must activate MofN on a token on which MofN has been generated, or you are unable to perform any cryptographic operations with the token.

(Not for Luna HSM 7) Some tokens have the ability to support customer loaded certificates used for key cloning. If your token supports this feature, and you wish to use your own key cloning certificates (rather than the default certificates provided by Thales), the first step is to Generate token keys.

NOTE   If you do this, you are not able to clone to any other Luna CA tokens except those containing your own certificate.

(Not for Luna HSM 7) This option is the next step in loading your own key cloning certificate onto the token. This action is done after option (75) Generate Token Keys.

(Not for Luna HSM 7) This option is the final step to load a customer key cloning certificate to the token. This step is done after options (75) Generate Token Keys and (76) Get Token Cert.

(Not for Luna HSM 7) Generate a special-purpose certificate for CertCo application.

(Not for Luna HSM 7) Modifies the secret splitting vector on a token.

(Not for Luna HSM 7) Create duplicates (copies) of all MofN secret splits.

Decache the MofN data.

Extract one of the following certificates from the HSM. You must supply the type and filename of the certificate you want to extract:

>Root certificate

>Hardware origin certificate

>ECC hardware origin certificate

>TWC (token wrapping certificate) version 1, 2, or 3.

>CITS device authentication certificate