stcconfig partitionidexport

Export a partition's STC public key to a file.

NOTE If the HSM is zeroized while STC is enabled, the STC link between LunaCM and the admin partition will no longer authenticate, since the admin partition identity no longer exists. If this occurs, you will be unable to log into, or initialize, the HSM. To recover from this state, run the stcconfig partitionidexport command without any parameters. When you run the command, a new identity is created for the admin partition, and the new admin partition public key is exported to the default directory. This will restore the STC link between LunaCM and the admin partition, allowing you to re-initialize the HSM. You can only run this command, while not logged into the HSM, if the HSM is zeroized.

Syntax

stcconfig partitionidexport -slot <slot_ID> [-file <filepath>]

Argument(s)	Shortcut	Description
-file <filepath>	-f	Specifies the full path to the file to which you want to export the partition's STC public key. If you omit this parameter the key is exported by default to the following file: <luna_client_root>/identities/<partition_serial_number>.pem
-slot <slot_ID>	-s	Specifies the slot containing the partition whose STC public key you want to export. This argument is available only if you are logged into the HSM's Admin partition.

Argument(s)

Shortcut

Description

-file <filepath>

-f

Specifies the full path to the file to which you want to export the partition's STC public key. If you omit this parameter the key is exported by default to the following file:

<luna_client_root>/identities/<partition_serial_number>.pem

-slot <slot_ID>

-s

Specifies the slot containing the partition whose STC public key you want to export.

This argument is available only if you are logged into the HSM's Admin partition.

Example

lunacm:> stcconfig partitionidexport

Successfully exported partition identity for the current slot to C:\Program Files\SafeNet\LunaClient\data\partition_identities\154438865321.pid

Command Result : No Error