hsm factoryreset
Reset the HSM to its factory configuration. Use this command to set the HSM back to factory default settings, clearing all contents (puts HSM in zeroized state). Because this is a destructive command, the user is asked to “proceed” unless the -force switch is provided at the command line. This command resets settings and configuration, but does not perform firmware rollback or uninstall new capabilities installed since the HSM came from the factory.
NOTE The hsm commands appear only when LunaCM's active slot is set to the administrative partition.
For eIDAS compliance, hsmrecover function is added to factoryreset commands - see Stored Data Integrity.
The standalone hsmrecover tool in the tools folder performs the same action, but can present additional messages that might be useful to Support engineers.
Syntax
hsm factoryreset [-force]
| Argument(s) | Shortcut | Description |
|---|---|---|
| -force | -f | Force the action without prompts. If this option is included in the list, the HSM will be zeroized without prompting the user for a confirmation of this destructive command. |
Example
lunacm:>hsm factoryreset
Error communicating with the HSM.
You are about to factory reset the HSM.
All contents of the HSM will be destroyed.
HSM policies will be reset and the remote PED vector will be erased.
Are you sure you wish to continue?
Type 'proceed' to continue, or 'quit' to quit now -> proceed
Resetting HSM
Command Result : No Error
Example output showing extended hsmrecover attempts
lunacm:>hsm factoryreset
Error communicating with the HSM.
You are about to factory reset the HSM.
All contents of the HSM will be destroyed.
HSM policies will be reset and the remote PED vector will be erased.
Are you sure you wish to continue?
Type 'proceed' to continue, or 'quit' to quit now -> proceed
Resetting HSM
lunaserver: cannot reset token: Input/output error
HSM Firmware not responding. Trying factory reset again.
This operation may take several minutes . . . . . . .
Command Result : No Error
