Home >

Lunacm Command Reference Guide > LunaCM Commands > audit > audit init

audit init

Initialize the Audit role on the HSM. This command attaches an audit domain and a role password for Password-authenticated HSMs, and creates a white Audit PED key for PED-authenticated HSMs. For PED-authenticated HSMs audit init also creates an audit domain, or receives an existing domain, so that selected HSMs are able to validate each others' HSM Audit Log files.

Because this command destroys any existing Audit role on the HSM, the user is asked to “proceed” unless the -force switch is provided at the command line.

Syntax

audit init [-auth] [-force]

Parameter Shortcut Description
-auth -a This option starts a login after the initialization completes.
-force -f If this option is included in the list, the audit role initialization action is forced without prompting the user for confirmation.

Example

lunacm:>audit init
 
The AUDIT role will be initialized.
Are you sure you wish to continue?
Type proceed to continue, or quit to quit now -> proceed
 
Please enter the domain to use for initializing the
Audit role (press <enter> to use the default domain):
> myauditdomain
 
Please enter the password:
> *******
 
Please re-enter password to confirm:
> *******
 
Command Result : No Error

Note:  For PED-authenticated HSMs, after you type "proceed" you are referred to the PED (which must be connected and 'Awaiting command...') which prompts you for domain (red PED Key) and Audit authentication (white PED Key).