Tampering the HSM

It may be necessary to tamper the HSM at the end of its lifecycle, or after any other security-sensitive event requiring all stored data to be immediately destroyed.

A tamper formats the secure memory of the HSM, erasing all configuration and user data.

Due to the highly destructive nature of this action, only the Administrator may tamper the HSM. It also requires that all sessions have been closed and that no user is currently accessing the HSM.

To tamper the HSM:

From a command prompt, type:

ctconf –x

The Administrator will then be prompted for their PIN and to confirm the action. Notification of success or failure will be displayed.