stm recover

Recover the HSM from Secure Transport Mode (STM). If the HSM is in initialized state, you must be logged in as HSM SO to recover from STM; if the HSM is zeroized, no login is required.

When you enter this command, include the random user string that was generated when the HSM was put into STM. A verification string will be displayed:

>If the verification string generated matches the string that was displayed when the HSM was put into STM (see stm transport), the HSM was not tampered with while in STM.

>If the verification string generated does not match the verification string generated when you placed the HSM in STM, this might indicate that the HSM has been tampered while in STM, or that an incorrect random user string has been entered..

NOTE   If the STM verification process fails due to a lost or incorrect verification string, customers do have the option of proceeding with the recovery of the HSM from STM mode. If the STM verification process fails due to a tamper, customers can also choose to factory-reset the HSM to bring it back to a Factory state, and then re-initialize.

If you are confident the HSM has not been tampered with, you can still enter "proceed" to recover from STM. See Secure Transport Mode for more information.

Syntax

stm recover -randomuserstring <string>

Option	Shortcut	Description
-randomuserstring <string>	-r	To confirm that the HSM was not tampered with while in STM, enter the random user string generated when it was placed in STM, in the format XXXX-XXXX-XXXX-XXXX.

Example

lunacm:>stm recover -randomuserstring Gxbx-dXFM-x4bW-bMWN

        Calculating the verification string (may take a few seconds)...

        Verification String: SL7P-GWtA-JFKt-psCH

        Please verify the string before you continue...

        Are you sure you wish to continue?

        Type 'proceed' to continue, or 'quit' to quit now ->proceed

        Recovering the HSM from transport...

        Successfully recovered from Transport Mode.

Command Result : No Error