|
Home > |
|---|
Access the slot commands to.
Slots originated as a cryptographic software concept, later overlaid onto HSM function, and originally corresponded to individual removable cryptographic "token" HSMs. In general, a physical "slot" correlates to a PKCS#11 crypto slot. However, to allow for cases where more than one HSM, or where physical Luna HSMs containing multiple virtual HSMs can be connected, we declare placeholder slots that might or might not be occupied by a physical device, but which are seen by the library as ready for a device to be connected.
This allows (for example) a USB-connected HSM to be connected to a Luna appliance or to a Luna client computer during a cryptographic session without requiring a restart. Similarly, it allows HA operation, where client activity is directed toward the HA virtual slot, but the client must be able to see all physical slots, in addition to that HA virtual slot, in order to coordinate the function of the HA group.
LunaCM depends on the availability of HSM partitions in order to be useful. If no application partition has been created, then only the HSM SO (administrative) partition is available, against which to run commands.
If the Chrystoki.conf / Crystoki.ini configuration file [Presentation] setting "ShowAdminTokens=" is set to no, then the HSM administrative partition/slot is also unavailable, and LunaCM is not usable. If you know you have a working Luna PCI-E or Luna G5 HSM attached to your LunaClient computer and LunaCM shows no usable commands, then verify in your Chrystoki.conf or Crystoki.ini file that "ShowAdminTokens" is not set to no.
slot
configset
configshow
list
partitionlist
set
| Parameter | Shortcut | Description |
|---|---|---|
| configset | cset | Set a configuration item for a slot. See "slot configset". |
| configshow | cshow | Show the configuration for a slot . See "slot configshow". |
| list | l | List the available slots. See "slot list". |
| partitionlist | plist | List the partitions for a slot. See "slot partitionlist". |
| set | s | Set the current slot. See "slot set". |