HSM

From Dogtag
Jump to: navigation, search

Supported HSMs

Thales nFast Connect 6000

To enable debugging, specify the following parameters in /opt/nfast/cknfastrc:

# CKNFAST_OVERRIDE_SECURITY_ASSURANCES=weak_des;silent;tokenkeys;explicitness
CKNFAST_DEBUG=9
CKNFAST_DEBUGFILE=/tmp/nethsm.log

Then restart the service:

$ /etc/init.d/nc_hardserver restart

Gemalto Luna SA

To enable RSA key generation add the following parameter in /etc/Chrystoki.conf:

Misc = {
   RSAKeyGenMechRemap = 1;
}

Nitrokey HSM

See Nitrokey HSM.

SoftHSM

See SoftHSM.

HSM Failover

See Configuring HSM Failover.

References