The following subcommands are available:
| Name | (short) | Description |
|---|---|---|
| selfTest | se | Test HSM |
| init | ini | Initialize the HSM |
| login | logi | Login as the HSM Admin (SO) |
| logout | logo | Logout as the HSM Admin (SO) |
| show | sh | Show Characteristics of the HSM |
| supportInfo | su | Get HSM support information |
| fwupdateInfo | fw | Get HSM Firmware Update Support Information |
| displayLicenses | di | Get HSM Licenses |
| changePolicy | changePo | Set HSM Policy value |
| showPolicies | showP | Get HSM Policies |
| changePw | changePw | Set HSM Admin (SO) password |
| generateDAK | g | Generate a new Device Authentication Key Pair |
| checkCertificates | che | Check Manufacturer Authentication Certificate |
| loadCustomerCert | loa | Load Manufacturer Authentication Certificate |
| setLegacyDomain | set | Set Legacy Cloning Domain |
| backup | b | Backup the HSM |
| restore | r | Restore the HSM |
| factoryReset | fa | Factory Reset the HSM |
| debug | de | > Debug |
| driver | dr | > Manage Device Driver for HSM |
| information | inf | > Monitor HSM Utilization & Show Event Counters |
| ped | p | > PIN Entry Device [PED-Auth Only] |
| update | u | > Update |
| srk | sr | > Secure Recovery Key [PED-Auth Only] |
HSM commands from the Luna shell are queued along with other demands on the HSM (such as cryptographic operations), and can run more slowly than normal if the HSM is very busy performing (for example) high-volume ECDSA signing operations.
hsm driver timeout set Command
hsm driver timeout show Command
hsm information monitor Command
hsm srk transmprtMode Commands
hsm srk transportMode Commands
hsm_srk_transportmode_enter_command