lunacm partition Commands
The following subcommands are available for the partition backup command.
| Command | Short | Description |
|---|---|---|
| backup | b | Backup objects from the current slot to a backup partition in a backup device in a specified slot. |
| restore | r | Restore objects from the specified backup partition in a backup device in a specified slot to the current user partition |
| list | l | List the backup partitions on a backup device in a specified slot. |
| contents | c | List the contents of a backup partition in a backup device in a specified slot |
| delete | d | Delete the specified backup partition in a backup device in a specified slot. |
Additional Backup/Restore information.
A backup device can be:
In each scenario, the HSM that is being used as a backup device should be configured as a backup device; the HSM capability "Enable full (non-backup) functionality" (9) is disabled.
If the HSM is not configured as a backup device then you will not be able to create new backup partitions on the HSM. You will only be able to backup/restore to/from any existing partitions.
To specify a backup device in another slot in the current system, use the "-s" option and give the actual slot number (ie "-s 4").
To specify a backup device in a remote work station, use the "-s" option and include the keyword "remote" (ie "-s remote"). When specifying a remote device, you must also provide a hostname and port number using the "-hostname" and "-port" options. (The "-hostname" option also accepts an IP address.)
To specify a USB attached backup device directly connected to the HSM in the current slot, use the "-s" option and include the keyword "direct" (ie "-s direct"). If you know the slot number that contains the USB attached HSM, you can specify that slot number explicitly (ie "-s 5").
When using a Password-Authenticated Luna Remote Backup HSM, the SO password, partition password, and domain values cannot be specified with the command. This is because the network connection is not secured and the passwords should not be transferred across the network in the clear. If these values are required, they will be prompted on the remote workstation console.
Before a backup HSM can be used, it must be initialized. To initialize a backup HSM, you must set your backup dHSM as your current slot and use "hsm init" command. If your backup HSM is in a remote workstation, then you must initialize it locally at that workstation, or remotely using remote PED if it is supported.
When backing up, the "append" option can be used to add objects to the existing backup partition. If the specified partition does not exist, then this option cannot be used. If the partition does exist and this option is not used, the existing partition is deleted and a new partition is created. If the "append" option is not used and the specified partition does not exist, it is created. If the partition must be created or resized, the SO password for the backup HSM is required.
To perform remote backup ("-s remote"), a remote backup server must be running on the remote work station. To start a remote backup server, run LunaCM on the remote workstation, select the slot you wish to use as a remote backup HSM, and use the command "remotebackup start". The remote backup server will accept commands and execute them against the current slot.