OFFBOARD KEY STORAGE Menu Functions
The OFFBOARD KEY STORAGE menu provides the following functions:
# | Function | Description |
---|---|---|
(101) | Extract Masked Object |
Extracts a key off the Luna PCIe HSM 7 in a masked format, into a file masked.key. You can rename the resulting file if you are testing with multiple extractions. |
(102) | Insert Masked Object |
Inserts an extracted, masked blob (file) back onto the Luna PCIe HSM 7. You are prompted for the name of the file, which must have been extracted from a Luna Network HSM using the same masking key (i.e., the same Luna Network HSM or a clone of it). |
(103) | Multisign With Value |
Performs the multisign function, after prompting you for the mechanism to use, the number of datablobs to be signed (limited to 5 for this demonstration command), and the data or filenames to be signed. |
(104) | Clone Object |
(Reserved for Thales use) Copies an object from the Luna PCIe HSM 7 to another HSM. |
(105) | SIMExtract |
This function takes a list of object handles, extracts them using the given authorization data for protection, and returns the extracted set of objects as a single data blob. The objects can be left on the partition or destroyed, depending on the value of the delete-after-extract flag. |
(106) | SIMInsert |
This function inserts the objects contained in a previously extracted blob into the HSM, and returns the list of handles assigned to the objects. |
(107) | SimMultiSign |
This function uses the key material in a previously extracted key blob to sign pieces of data in the input data table, returning the signatures through the signature table. >On a Luna PCIe HSM 7 with Luna HSM Firmware 7.4.0 or older, the key blob must contain a single key, otherwise an error is returned. >On a Luna PCIe HSM 7 with Luna HSM Firmware 7.7.0 or newer, the indicated blob must contain no more than one key/key pair that is suitable for the requested signature mechanism, otherwise an error is returned. |
(118) | Extract Object |
Extracts a key off the Luna PCIe HSM 7 into a file. |
(119) | Insert Object |
Inserts an extracted blob (file) back onto the Luna PCIe HSM 7. |