OFFBOARD KEY STORAGE Menu Functions
The OFFBOARD KEY STORAGE menu provides the following functions:
# | Function | Description |
---|---|---|
(101) | Extract Masked Object |
Extracts a key off the Luna Network HSM in a masked format, into a file masked.key. You can rename the resulting file if you are testing with multiple extractions. |
(102) | Insert Masked Object |
Inserts an extracted, masked blob (file) back onto the Luna Network HSM. You are prompted for the name of the file, which must have been extracted from a Luna Network HSM using the same masking key (i.e., the same Luna Network HSM or a clone of it). |
(103) | Multisign With Value |
Performs the multisign function, after prompting you for the mechanism to use, the number of datablobs to be signed (limited to 5 for this demonstration command), and the data or filenames to be signed. |
(104) | Clone Object |
(Reserved for Thales use) Copies an object from the Luna Network HSM to another HSM. |
(105) | SIMExtract |
This function takes a list of object handles, extracts them using the given authorization data for protection, and returns the extracted set of objects as a single data blob. The objects can be left on the partition or destroyed, depending on the value of the delete-after-extract flag. |
(106) | SIMInsert |
This function inserts the objects contained in a previously extracted blob into the HSM, and returns the list of handles assigned to the objects. |
(107) | SimMultiSign |
This function uses the key material in a previously extracted key blob to sign pieces of data in the input data table, returning the signatures through the signature table. The key blob must contain a single key, otherwise an error is returned. |
(118) | Extract Object |
Extracts a key off the Luna Network HSM into a file. |
(119) | Insert Object |
Inserts an extracted blob (file) back onto the Luna Network HSM. |