Home >

LunaSH Command Reference Guide > LunaSH Commands > token > token backup partition delete

token backup partition delete

Delete a backup partition on the Backup device and free the license used by the HSM Partition. To use the token backup partition delete command you must be logged in to the Backup HSM as HSM Admin.

WHEN to USE LunaSH "token backup" commands, or use "vtl backup" commands:  

LunaSH token backup commands operate a SafeNet Luna Backup HSM attached directly to SafeNet Luna Network HSM via USB, and are not intended for use with remotely connected backup devices.
You might have a locally-connected backup HSM (connects directly to a SafeNet Luna Network HSM via USB cable) and a locally connected serial terminal and be walking them from SafeNet Luna Network HSM to SafeNet Luna Network HSM in your server room to perform backups. Or you might be administering remotely via SSH and lunash:> commands, while a technician in your server center carries the backup HSM from one SafeNet Luna Network HSM to the next. In either case, these token backup commands are the method to use. The important distinction is where the backup HSM is physically connected - from the SafeNet Luna Network HSM perspective, those are both local backup operations to a backup HSM that is locally connected to the appliance.

VTL backup commands operate a SafeNet Luna Backup HSM connected to a computer, and located distantly from your primary SafeNet Luna Network HSM appliance. The VTL backup commands are not for use with a SafeNet Luna Backup HSM that is connected directly to your SafeNet Luna Network HSM appliance.
For true, hands-off, lights-out operation of your SafeNet appliances, use a SafeNet Luna Backup HSM located in your administrator's office (or other convenient location), connected to a computer acting as a Remote Backup server (this could be your administrative workstation, or it could be a completely separate computer). This means the computer and Backup HSM are located near you and remote/distant from your SafeNet Luna Network HSM appliance(s). For that application, use the backup commands in the VTL utility supplied with the SafeNet Luna Network HSM Client software (which must be installed on the computer that is acting as Remote Backup server) - the appliance token backup commands are not designed to work for Remote Backup.

An external SafeNet Luna HSM can be USB-connected to a SafeNet Luna Network HSM appliance for:

local backup/restore operations (SafeNet Luna Backup HSM)

PKI bundle operations (SafeNet Luna USB HSM)

SafeNet Luna Network HSM does not pass PED operations and data through to an externally connected SafeNet Luna HSM from a Luna PED that is connected locally to the SafeNet Luna Network HSM.

If the external HSM is PED-authenticated, then the options for Luna PED connection are:

local PED connection, directly to the affected HSM, when needed, or

Remote PED connection, passed through the SafeNet Luna Network HSM 

Note:  Support for PKI Bundles with Remote PED begins at firmware version 6.10.1 in the external HSM.

Note:  Support for locally connected Backup HSM with Remote PED, begins at firmware version 6.10.1 in the external HSM.

Note:  Use of Remote PED with an external device is made possible when you set up with the commands
hsm ped vector init -serial <serial#_of_external_HSM> and
hsm ped connect -serial <serial#_of_external_HSM>
before using token pki or token backup commands.

User Privileges

Users with the following privileges can perform this command:

Admin

Operator

Syntax

token backup partition delete -partition <partition_name> -serial <serialnum> [-force]

Option Shortcut Description
-force -f Specifies that the Backup Token partition is erased without prompting the user for a confirmation of this destructive command.
-partition <partition_name> -p Specifies the name of the Backup Token partition to delete. Obtain the Backup Token partition name by using the token backup partition list command.
-serial <serialnum> -s Specifies the serial number of the Backup Token partition to delete. Obtain the Backup Token partition serial number by using the token backup partition list command.

Example

lunash:>token backup partition delete -partition sa78par1backup -serial 496771
 
 
CAUTION:  Are you sure you wish to delete the partition named:
            sa78par1backup
          Type 'proceed' to delete the partition, or 'quit'
          to quit now.
          > proceed
'token backup partition delete' successful.
 
 
Command Result : 0 (Success)