Home >

SDK Reference Guide > Extensions to PKCS#11 > SafeNet Enterprise HSM-Specific Commands

SafeNet Network HSM-Specific Commands

SafeNet Network HSM, both the HSM Server and the client, use PKCS#11 and the SafeNet Extensions, with some exceptions that differ from other SafeNet products. This SDK document is meant to support all SafeNet products that use PKCS#11 and the other supported interfaces, in addition to SafeNet Network HSM.

Commands Not Available Through Libraries

Several commands, both standard PKCS#11 commands and our Extensions are not enabled in the Client, because their functions are addressed on SafeNet Network HSM via the lunash interface. These are:

C_InitToken

C_SetPin

CA_ResetPin

CA_SetCloningDomain

all of the CCM commands

CA_ClonePrivateKey

C_GetOperationState

C_SetOperationState

Configuration Settings

Other SafeNet tokens implement configuration settings that can be used to modify the behavior of the token, or can be read to determine how the token will behave.

In SafeNet Network HSM, this configuration and modification of HSM and behavior is controlled in lunash via HSM Policies, using the following commands:

hsm showpolicies

hsm changepolicy

Control of HSM Partition behavior is accomplished through the HSM Partition Policies, using the following lunash commands:

partition showpolicies

partition changepolicy