Home >

Administration Guide > Re-initialization and Zeroization > Re-initializing an HSM

Re-initialize an HSM

To initialize or re-initialize an HSM, use the command:

lunacm hsm init -label <new-HSM-label>

Note:  Initializing/re-initializing an HSM destroys all HSM Partitions, and all contents are lost. This is not an action you would perform on a production Luna HSM.  However, if you have made major changes in your system/deployment, or if you are moving a Luna HSM from a lab situation into production, you might wish to clear everything and restart with a "clean slate". In such cases, re-initialization might be appropriate. It would also be appropriate if you were so instructed by Customer Support.

Note:  Invoking the lunacm hsm init command results in the HSM Admin/Security Officer being logged out, MofN being deactivated (applies to specific configurations only), and all partitions being deactivated. These preparatory actions take place before the warning prompt appears, with its request for you to type "Proceed" or "Quit". That is, if you invoke luna cm hsm init and then type "quit" at the prompt, initialization does not take place (meaning that you do not lose existing token/HSM contents), but any current login or activation state is closed, whether you abort the command or not.