vtl

The vtl (Virtual Token Library) command-line utility is installed with the SafeNet Luna HSM Client software. It is used to manage the relationship between your Client computer and one or more SafeNet appliances.

NOTE   Many vtl functions have been moved to LunaCM. Thales Group recommends using LunaCM for client configuration wherever possible. See lunacm:> clientconfig for details.

Open a command prompt window or console, cd to the directory where you installed your client software, and run the vtl command (with the -h option, to see the available sub-commands).

These are the commands that you can use to manage the relationship between your SafeNet Luna HSM Client computer and one or more SafeNet appliances (either SafeNet Luna Network HSMs, or SafeNet Luna Backup HSM configured for remote backup). You must have Administrator privileges on the client computer. If you do not also have authority on the SafeNet appliance(s), then you need the co-operation of the person who holds that authority.

admin@mycomputer:~>vtl
usage: (select command -h for additional information)

NOTE   You need to be Administrator (or equivalent) when running vtl commands that need to access /etc and /user (and the equivalents in Windows).

Subcommands

Subcommand	Description
addCA	Add a Certificate Authority root chain certificate to the list of CAs registered on the client. See vtl addCA. This command is for future use and does not apply to this version of the SafeNet Luna HSM Client.
addServer	Adds the specified server to the client's list of trusted servers. See vtl addServer.
addServerNoCert	Add an HSM server's IP/hostname to the client's list of SafeNet Luna Network HSM servers. See vtl addServerNoCert. This command is for future use and does not apply to this version of the SafeNet Luna HSM Client.
cklogsupport	Enable or disable CKLOG support. See vtl cklogsupport.
createCert	Create (or re-create) the client's certificate and private key used for NTLS (Network Trust Link Service). See vtl createCert.
createCSR	Create a Certificate Signing Request (CSR)—a private key and unsigned client certificate. See vtl createCSR.
deleteCA	Delete a Certificate Authority root chain certificate from the truststore on the client. See vtl deleteCA. This command is for future use and does not apply to this version of the SafeNet Luna HSM Client.
deleteServer	Remove a server/host from the client's list of trusted HSM servers. See vtl deleteServer.
deleteServerNoCert	Delete the IP/hostname of a SafeNet Luna Network HSM server from the list of servers, without deleting the certificate associated with that server. See vtl deleteServerNoCert. This command is for future use and does not apply to this version of the SafeNet Luna HSM Client.
examineCert	Display details of a specified certificate. See vtl examineCert.
fingerprint	Display the fingerprint of a specified certificate. See vtl fingerprint.
listCAs	Display a list of the Certificate Authority root chain certificates registered on the client. See vtl listCAs. This command is for future use and does not apply to this version of the SafeNet Luna HSM Client.
listServers	Display a list of HSM servers trusted by this client. See vtl listServers.
listSlots	List all PKCS#11 cryptographic device slots that can be seen at this time. See vtl listSlots.
logging	Configure logging for Windows computers. See vtl logging.
replaceServer	Replace a named server/host from the client's list of trusted HSM servers with a new named server/host. See vtl replaceServer.
supportInfo	Create a support information file, when one is requested by Thales Group Customer Support. See vtl supportInfo.
verify	Verify the visible HSM slots or partitions. See vtl verify.