Configuring a PED-Authenticated Application Partition

You have already initialized and configured your PED-authenticated SafeNet Luna PCIe HSM, to the point of initializing the HSM and assigning a Security Officer to administer it, as well as setting any HSM-wide configuration options. In this chapter, you will create and configure an application partition on your PED-authenticated HSM. The partition you create has its own separate Security Officer and is largely invisible to the HSM SO.

High-Level Configuration Steps

1.HSM SO Creates PED-Authenticated Partition, Local to Client

2.Initialize the Partition SO and Crypto Officer Roles on a PED-Auth Partition

3.Initialize the Crypto User Role on a PW-Authenticated Partition

4.[Optional] Activate the Crypto Officer and/or Crypto User roles. See Activate a PED-Authenticated Partition.