stc partition export

Export the specified partition's public key to a file. You must be logged in as HSM SO to use this command, and it can only be run on an uninitialized partition. Once the partition has been initialized, the public key can be exported by the Partition SO only, using LunaCM (see stcconfig partitionidexport).

NOTE This command syntax has changed in Luna 7.7 and newer. See partition stcidentity export.

If the HSM is zeroized while STC is enabled, the STC link between LunaSH and the admin partition will no longer authenticate, since the admin partition identity no longer exists. If this occurs, you will be unable to log into, or initialize, the HSM. To recover from this state, run the stc partition export command without any parameters. When you run the command, a new identity is created for the admin partition, and the new admin partition public key is exported to the default directory. This will restore the STC link between LunaSH and the admin partition, allowing you to re-initialize the HSM. You can only run this command, while not logged into the HSM, if the HSM is zeroized.

User Privileges

Users with the following privileges can perform this command:

>Admin

>Operator

Syntax

stc partition export -partition <partition_name>

Argument(s)	Shortcut	Description
-partition <partition_name>	-p	Specifies the name of the partition whose public key you want to export.

Example

lunash:>stc partition export -partition partition2

Successfully exported partition identity for partition partition2 to file: 154438865290.pid

Command Result : 0 (Success)