Extensions to PKCS#11

This section lists functions that are extensions to the PKCS#11 standard. These functions are provided by the Thales implementation of the PKCS#11 Cryptoki library; that is, the PKCS#11 standard itself does not specify them. FM code must include fmsupt.h to use any of them.

NOTE   Functions that are identical to the ones listed below exist in the Luna HSM Client, with a ‘CA_’ prefix in their names instead of an ‘FM_’ prefix. The descriptions of the Luna HSM Client PKCS#11 extensions apply to all of the functions listed below. For descriptions of any of the functions listed in this section, refer to Luna Extensions to PKCS#11.

V2 functions pass in a 16-byte application accessID while non-V2 functions pass in an 8-byte application accessID (4 bytes high and 4 bytes low).

Operational concepts of Luna HSMs related to the functions below are described in the HSM and partition administration guides. For more information, refer to About the HSM Administration Guide and About the Partition Administration Guide.

Luna HSM Firmware 7.7.0 and Newer

The following extensions were introduced with Luna HSM Firmware 7.7.0:

>FM_SMKRollover

>FM_OpenSessionWithAppIDV2

>FM_CloseApplicationIDV2

>FM_CloseApplicationIDForContainerV2

>FM_OpenApplicationIDV2

>FM_OpenApplicationIDForContainerV2

>FM_SetApplicationIDV2

>FM_RandomizeApplicationID

>FM_GetApplicationID

>FM_SIMExtract

>FM_SIMInsert

>FM_SIMMultiSign

>FM_AuthorizeKey

>FM_SetAuthorizationData

>FM_ResetAuthorizationData

>FM_AssignKey

>FM_IncrementFailedAuthCount

>FM_DeriveKeyAndWrap

>FM_GetSessionInfoV2

>FM_CloneAsSourceInit

>FM_CloneAsTargetInit

>FM_CloneAsSource

>FM_CloneAsTarget

>FM_GetConfigurationElementDescription

>FM_GetHSMCapabilities (calls CA_GetHSMCapabilitiesSet)

>FM_GetHSMCapabilitySetting

>FM_GetHSMPolicies (calls CA_GetHSMPoliciesSet)

>FM_GetHSMPolicySetting

>FM_GetTokenCapabilities

>FM_GetTokenCapabilitySetting (calls CA_GetContainerCapabilitySetting)

>FM_GetTokenPolicies

>FM_GetTokenPolicySetting (calls CA_GetContainerPolicySetting)

>FM_FindAdminSlotForSlot

Luna HSM Firmware 7.4.0 and Newer

The following extensions were introduced with Luna HSM Firmware 7.4.0:

>FM_Bip32ExportPublicKey

>FM_Bip32ImportPublicKey