Troubleshooting

This section provides troubleshooting tips for errors you may encounter when performing a partition backup/restore operation.

Warning: This token is not in the factory reset (zeroized) state

If you insert a backup token that has previously been used on a password-authenticated SafeNet Luna Network HSM into a PED-authenticated SafeNet Luna Network HSM, and attempt to initialize it, the system responds with the message "Warning: This token is not in the factory reset (zeroized) state" as shown in the following example:

lunash:>token backup init -label mylunatoken -serial 1234567 -force                                              

Warning:  This token is not in the factory reset (zeroized) state. 
          You must present the current Token Admin login credentials 
          to clear the backup token's contents. 
                                                      
Luna PED operation required to initialize backup token - use 
Security Officer (blue) PED key. 
            
Error:  'token init' failed. (300130 : LUNA_RET_INVALID_ENTRY_TYPE)                                                                   
Command Result : 65535 (Luna Shell execution)                                             

This is a security feature, intended to prevent backup of PED-secured HSM objects onto a less secure Password Authenticated token. To work around this problem, issue the token factoryreset command, and then initialize the token, as shown in the following example:

lunash:>token backup factoryreset -serial 1234567 
CAUTION:  Are you sure you wish to reset this backup token to 
          factory default settings? All data will be erased.

Type 'proceed' to return the token to factory default, or 

'quit' to quit now.

> proceed

token factoryReset' successful.
Command Result : 0 (Success)

lunash:>token backup init -label mylunatoken   -serial 1234567  -force
        Luna PED operation required to initialize backup token - use 
        Security Officer (blue) PED key.
        Luna PED operation required to login to backup token - use 
        Security Officer (blue) PED key.
        Luna PED operation required to generate cloning domain on 
        backup token - use Domain (red) PED key.

'token init' successful.

Command Result : 0 (Success)