|
Home > |
|---|
This section provides troubleshooting tips for errors you may encounter when performing a partition backup/restore operation.
If you insert a backup token that has previously been used on a Password Authenticated SafeNet Network HSM into a PED Authenticated SafeNet Network HSM, and attempt to initialize it, the system responds with the message "Warning: This token is not in the factory reset (zeroized) state" as shown in the following example:
lunash:>token backup init -label mylunatoken -serial 1234567 -force Warning: This token is not in the factory reset (zeroized) state.
You must present the current Token Admin login credentials
to clear the backup token's contents.
Luna PED operation required to initialize backup token - use
Security Officer (blue) PED key.
Error: 'token init' failed. (300130 : LUNA_RET_INVALID_ENTRY_TYPE) Command Result : 65535 (Luna Shell execution)
This is a security feature, intended to prevent backup of PED-secured HSM objects onto a less secure Password Authenticated token. To work around this problem, issue the token factoryreset command, and then initialize the token, as shown in the following example:
lunash:>token backup factoryreset -serial 1234567
CAUTION: Are you sure you wish to reset this backup token to
factory default settings? All data will be erased.
Type 'proceed' to return the token to factory default, or
'quit' to quit now.
> proceed
token factoryReset' successful.
Command Result : 0 (Success)
lunash:>token backup init -label mylunatoken -serial 1234567 -force
Luna PED operation required to initialize backup token - use
Security Officer (blue) PED key.
Luna PED operation required to login to backup token - use
Security Officer (blue) PED key.
Luna PED operation required to generate cloning domain on
backup token - use Domain (red) PED key.
'token init' successful. Command Result : 0 (Success)