Home >

LunaCM Command Reference Guide > LunaCM Commands > srk > srk generate

srk generate

Resplit the Secure Recovery Key. This command generates new splits of the Secure Recovery Key. The internal split is stored in a secure memory area on the HSM. The external split is imprinted upon a purple PED Key (or multiple purple keys if you invoke MofN).

The PED must be connected, and you must present "new" purple PED Keys when prompted. "New" in this case, means a purple PED Key that is literally new, or a PED Key that has been used for another purpose - as long as it does not contain the current valid external SRK split, before the new generating operation. For safety reasons, the HSM and PED detect and refuse to overwrite the current purple PED Key(s).

Syntax

srk generate

Example

lunacm:> srk generate
 
Please attend to the PED.
New SRK generated.
 
Command Result : 0 (Success)