[OPTION] Set Up HSM and Client Connections without Using DNS

Use of DNS is very common, however there can be situations where it is desirable for name resolution to use the IP address, ensuring that the HSM appliance's IP can be reached, and a TLS handshake achieved during (for example) a disaster recovery situation. The goal in that sort of situation is resilience, such that HSM connections can be established before DNS-infrastructure is up and running.

It is possible to completely setup HSMs and clients without the use of any DNS as follows.

1.Register the HSM on the clients with its IP address.

vtl addServer -n HSMappliance.IP.v4/6.Address -c /path/to/server.pem

2.Register the client either by its IP address on Luna Network HSM 7 appliance

client register -client YOUR_CLIENT_NAME -ip Client.IP.v4/6.Address

... or by its hostname but with the ntls ipcheck disabled

client register -client YOUR_CLIENT_NAME -hostname SubjectNameFromClientCert

ntls ipcheck disable