|
Home > |
Administration Guide > Capabilities and Policies
|
|---|
HSMs, and partitions within them, are characterized by capabilities that are set at the factory, or added by means of capability updates, and that are adjusted by means of settable policies that correspond to some of the capabilities.
HSM capabilities, and the HSM policies that derive from them, apply HSM-wide.
Application partition capabilities, and the application partition policies that derive from them, can be inherited from the HSM, or control characteristics that make sense only at the application partition level.
All policies have an equivalent capability, but not all capabilities are matched by a policy that allows adjustment of the capability.
Some policy settings are numerical values that can be increased or decreased. Most policy settings are simply OFF/ON switches. Policy setting requires that the SO be logged in. For HSM-wide policies, and for partition policies in legacy partitions, that is the HSM SO. For partition-level policies in PPSO partitions, that is the partition SO.
Set policies with the hsm changepolicy command or the partition changepolicy command, as appropriate. The command requires that you identify the policy number that is to change, and the new value it is to hold . For OFF/ON policies, the value is set as zero or one, respectively.
The following sections list and describe the Capabilities and (if it exists) the relevant Policy that corresponds with each.