CHAPTER 3 HSM Initialization
Notice that the HSM now has a label.
The next step is
"Prepare to Create a Partition (PED Authenticated)" on page 75
on the HSM.
Initialization - some additional options and description
Anywhere there are choices, options abound. Rather than clutter the main initialization instruction page with a variety of
possible paths and branches, this section presents some of the other situations that you might encounter while
initializing a Luna HSM. So, assume that you have issued the hsm init command. The system told you to attend to the
Luna PED, which you already had connected.
Luna PED demands the first "SO/HSM Admin" PED Key.
Insert the Blue PED Key
This table (below) summarizes the steps involving Luna PED immediately after you invoke the command "hsm init...".
The first column is the simplest, and most like what you would encounter the very first time you initialize, using "fresh
from the carton" iKey PED Keys.
The next two columns of the table show some differences if you are using previously-imprinted PED Keys, choosing
either to reuse what is found on the key (imprint it on your new HSM - see
Group PED Keys
) or, in the third column
example to overwrite what is found and generate a new secret to be imprinted on both the PED Key and the HSM.
Luna SA Configuration Guide
Release 5.4.1 007-011136-007 Rev C July 2014 Copyright 2014 SafeNet, Inc. All rights reserved.
62