cluster member partition object assign
This command allows you to select objects to migrate from an eligible Luna application partition to a Luna keyring.
NOTE This command requires minimum Luna Appliance Software 7.9.0 with the lnh_cluster-1.0.5 package installed.
Thales requires minimum Luna Appliance Software 7.8.5 with the lnh_cluster-1.0.4 package, Luna HSM Firmware 7.8.4, and Luna HSM Client 10.7.2 to use clusters in production environments, or minimum Luna Appliance Software 7.9.0 with the lnh_cluster-1.0.5 package, Luna HSM Firmware 7.8.4, and Luna HSM Client 10.8.0 to migrate keys from Luna application partitions.
REST API: PUT /api/cluster/member/partitions/{partitionID}/objects
User Privileges
Users with the following privileges can perform this command:
>Admin
Syntax
cluster member partition object assign -partitionid <UUID> -keyringrid <UUID> {-objectid <OUID(s)> | -filename <filename>} [-copassword <password>] [-keyringcopassword <password>]
| Argument(s) | Shortcut | Description |
|---|---|---|
| -copassword <password> | -c | Specifies the Crypto Officer password for the migrating partition. |
| -filename <filename> | -f | Specifies the name of the file containing the list of object OUIDs to be migrated. The file must be stored in the LunaSH user's files on the appliance (see lunash:> my file list). |
| -keyringcopassword <password> | -keyringc | Specifies the Keyring Crypto Officer password for the target keyring. |
| -keyringid <UUID> | -keyringi | Specifies the UUID of the target keyring. |
| -objectID <OUID> | -o | A colon-separated (:) list of object OUIDs to migrate to the keyring. You can specify up to 10 OUIDs with this option. |
| -partitionid <UUID> | -p | Specifies the UUID of the migrating partition. |
Example
lunash:>cluster member partition object assign -partitionid 50ef5563-eacd-4118-8486-d52f38c8389a -keyringid 14feaa24-53df-43d9-9457-2d53519e3f46 -filename migrate_keys Please enter the Partition CO password: > ******** Please enter the Keyring CO password: > ******** Success Command Result : 0 (Success)
