SafeNet Luna PCIe HSM-Specific Commands

SafeNet Luna PCIe HSM, both the HSM Server and the client, use PKCS#11 and the SafeNet Extensions, with some exceptions that differ from other SafeNet products. This SDK document is meant to support all SafeNet products that use PKCS#11 and the other supported interfaces, in addition to SafeNet Luna PCIe HSM.

Commands Not Available Through Libraries

Several commands, both standard PKCS#11 commands and our Extensions are not enabled in the Client, because their functions are addressed on SafeNet Luna PCIe HSM via the LunaSH interface. These are:

>C_InitToken

>C_SetPin

>CA_ResetPin

>CA_SetCloningDomain

>All of the CCM commands

>CA_ClonePrivateKey

>C_GetOperationState

>C_SetOperationState

Configuration Settings

Other SafeNet tokens implement configuration settings that can be used to modify the behavior of the token, or can be read to determine how the token will behave.

In SafeNet Luna PCIe HSM, this configuration and modification of HSM and behavior is controlled in LunaSH via HSM Policies, using the following commands:

>hsm showpolicies

>hsm changepolicy