GET /api/lunasa/hsms/{hsmid}/partitions/{partitionid}/policies

Gets all policies associated with the partition.

Parameters

hsmid

The serial number of the HSM of interest

Use: Required

JSON Schema:

   Object
   type: string

partitionid

The identifier of the partition of interest

Use: Required

JSON Schema:

   Object
   type: string

Responses

200

A list of all policies associated with the partition. The list includes unique identifiers that can be used to get more specific information.

JSON Schema: Partition Policies

400

Unexpected error

404

HSM or partition does not exist.

Example Request

   GET 
   https://1.2.3.4:8443//api/lunasa/hsms/117290/partitions/273087011507/policies

Example Result

{
    "policies": [
        {
            "id": "0",
            "name": "Allow private key cloning",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/0"
        },
        {
            "id": "1",
            "name": "Allow private key wrapping",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/1"
        },
        {
            "id": "2",
            "name": "Allow private key unwrapping",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/2"
        },
        {
            "id": "3",
            "name": "Allow private key masking",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/3"
        },
        {
            "id": "4",
            "name": "Allow secret key cloning",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/4"
        },
        {
            "id": "5",
            "name": "Allow secret key wrapping",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/5"
        },
        {
            "id": "6",
            "name": "Allow secret key unwrapping",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/6"
        },
        {
            "id": "7",
            "name": "Allow secret key masking",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/7"
        },
        {
            "id": "10",
            "name": "Allow multipurpose keys",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/10"
        },
        {
            "id": "11",
            "name": "Allow changing key attributes",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/11"
        },
        {
            "id": "15",
            "name": "Ignore failed challenge responses",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/15"
        },
        {
            "id": "16",
            "name": "Operate without RSA blinding",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/16"
        },
        {
            "id": "17",
            "name": "Allow signing with non-local keys",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/17"
        },
        {
            "id": "18",
            "name": "Allow raw RSA operations",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/18"
        },
        {
            "id": "20",
            "name": "Max failed user logins allowed",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/20"
        },
        {
            "id": "21",
            "name": "Allow high availability recovery",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/21"
        },
        {
            "id": "22",
            "name": "Allow activation",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/22"
        },
        {
            "id": "23",
            "name": "Allow auto-activation",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/23"
        },
        {
            "id": "25",
            "name": "Minimum pin length (inverted: 255 - min)",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/25"
        },
        {
            "id": "26",
            "name": "Maximum pin length",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/26"
        },
        {
            "id": "28",
            "name": "Allow Key Management Functions",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/28"
        },
        {
            "id": "29",
            "name": "Perform RSA signing without confirmation",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/29"
        },
        {
            "id": "30",
            "name": "Allow Remote Authentication",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/30"
        },
        {
            "id": "31",
            "name": "Allow private key unmasking",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/31"
        },
        {
            "id": "32",
            "name": "Allow secret key unmasking",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/32"
        },
        {
            "id": "33",
            "name": "Allow RSA PKCS mechanism",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/33"
        },
        {
            "id": "34",
            "name": "Allow CBC-PAD (un)wrap keys of any size",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/34"
        },
        {
            "id": "35",
            "name": "Allow private key SFF backup/restore",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/35"
        },
        {
            "id": "36",
            "name": "Allow secret key SFF backup/restore",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/36"
        },
        {
            "id": "37",
            "name": "Force Secure Trusted Channel",
            "url": "/api/lunasa/hsms/117290/partitions/273087011794/policies/37"
        }
    ]
}