|
Home > |
|---|
Note: PKI mode is no longer supported and these commands have been deprecated.
Access the token pki commands. These commands allow you to operate token HSMs (with SafeNet Luna USB HSM connected to the SafeNet Luna Network HSM via USB) when used in PKI mode.
An external SafeNet Luna HSM can be USB-connected to a SafeNet Luna Network HSM appliance for:
•local backup/restore operations (SafeNet Luna Backup HSM)
•PKI bundle operations (SafeNet Luna USB HSM)
SafeNet Luna Network HSM does not pass PED operations and data through to an externally connected SafeNet Luna HSM from a Luna PED that is connected locally to the SafeNet Luna Network HSM.
If the external HSM is PED-authenticated, then the options for Luna PED connection are:
•local PED connection, directly to the affected HSM, when needed, or
•Remote PED connection, passed through the SafeNet Luna Network HSM
Note: Support for PKI Bundles with Remote PED begins at firmware version 6.10.1 in the external HSM.
Note: Support for locally connected Backup HSM with Remote PED, begins at firmware version 6.10.1 in the external HSM.
Note: Use of Remote PED with an external device is made possible when you set up with the commands
hsm ped vector init -serial <serial#_of_external_HSM> and
hsm ped connect -serial <serial#_of_external_HSM>
before using token pki or token backup commands.
token pki
activate
changepin
clone
deploy
factoryreset
listall
listdeployed
predeploy
resetpin
undeploy
update
| Option | Shortcut | Description |
|---|---|---|
| activate | a | Activate PKI Token for use with your application. See token pki activate. |
| changepin | ch | Change PKI Token PIN. See token pki changepin. |
| clone | cl | Clone PKI Token contents. See token pki clone. |
| deploy | d | Deploy PKI Token. See token pki deploy. |
| factoryreset | f | Factory Reset PKI Token. See token pki factoryreset. |
| listall | lista |
List All PKI Tokens. See token pki listall. |
| listdeployed | listd | List All Deployed Tokens. See token pki listdeployed. |
| predeploy | p | Pre-deploy PKI Token. See token pki predeploy. |
| resetpin | r | Reset PKI Token PIN. See token pki resetpin. |
| undeploy | un | Undeploy PKI Token. See token pki undeploy. |
| update | up | Access the token pki update commands.See token pki update. |
Note: The above commands prepare an HSM, externally connected to a SafeNet Luna Network HSM appliance, for operation in the PKI use-case. However, once the external HSM has been deployed for PKI bundle, it must be assigned to the remote client, by means of the command client assignpartition.