OFFBOARD KEY STORAGE Menu Functions

The OFFBOARD KEY STORAGE menu provides the following functions:

# Function Description
(101) Extract Masked Object

Extracts a key off the Luna USB HSM 7 in a masked format, into a file masked.key. You can rename the resulting file if you are testing with multiple extractions.

(102) Insert Masked Object

Inserts an extracted, masked blob (file) back onto the Luna USB HSM 7. You are prompted for the name of the file, which must have been extracted from a Luna Network HSM using the same masking key (i.e., the same Luna Network HSM or a clone of it).

(103) Multisign With Value

Performs the multisign function, after prompting you for the mechanism to use, the number of datablobs to be signed (limited to 5 for this demonstration command), and the data or filenames to be signed.

(104) Clone Object

(Reserved for Thales use) Copies an object from the Luna USB HSM 7 to another HSM.

(105) SIMExtract

This function takes a list of object handles, extracts them using the given authorization data for protection, and returns the extracted set of objects as a single data blob. The objects can be left on the partition or destroyed, depending on the value of the delete-after-extract flag.

(106) SIMInsert

This function inserts the objects contained in a previously extracted blob into the HSM, and returns the list of handles assigned to the objects.

(107) SimMultiSign

This function uses the key material in a previously extracted key blob to sign pieces of data in the input data table, returning the signatures through the signature table. The indicated blob must contain no more than one key/key pair that is suitable for the requested signature mechanism, otherwise an error is returned.

(118) Extract Object

Extracts a key off the Luna USB HSM 7 into a file.

(119) Insert Object

Inserts an extracted blob (file) back onto the Luna USB HSM 7.