SafeNet Network HSM-Specific Commands

SafeNet Network HSM, both the HSM Server and the client, use PKCS#11 and the SafeNet Extensions, with some exceptions that differ from other SafeNet products. This SDK document is meant to support all SafeNet products that use PKCS#11 and the other supported interfaces, in addition to SafeNet Network HSM.

Commands Not Available Through Libraries

Several commands, both standard PKCS#11 commands and our Extensions are not enabled in the Client, because their functions are addressed on SafeNet Network HSM via the lunash interface. These are:

•C_InitToken

•C_SetPin

•CA_ResetPin

•CA_SetCloningDomain

•all of the CCM commands

•CA_ClonePrivateKey

•C_GetOperationState

•C_SetOperationState

Configuration Settings

Other SafeNet tokens implement configuration settings that can be used to modify the behavior of the token, or can be read to determine how the token will behave.

In SafeNet Network HSM, this configuration and modification of HSM and behavior is controlled in lunash via HSM Policies, using the following commands:

•"hsm showpolicies" on page 1

•"hsm changepolicy" on page 1

Control of HSM Partition behavior is accomplished through the HSM Partition Policies, using the following lunash commands:

•"partition showpolicies" on page 1

•"partition changepolicy" on page 1

SafeNet PCIe HSM 6.3 Product Documentation
007-011329-012 Rev. A 14 July 2017 Copyright 2001-2017 Gemalto All rights reserved.