Sansec HSM User Manual V2.2
21
7.
Key Management
7.1.
Key Initialization
This operation destroys all keys and user information in the cryptographic device.
Key initialization:
-----------
Please be careful, because this operation destroys all keys and user information in the device.
Please input “YES” to decide [Quit(Q)] [Return(R)]>
<!>Safety reminder
：
This function is used not only to reset the initial state of the
cryptographic device, but also to destroy all keys and user files in the device.
7.2.
Setting Local Master Key
This operation is used to generate a new master key to ensure the security of other
keys. Three key fragments need to be entered to set up the master key; and the HSM will
automatically synthesize the master key internally.
Setting local master key:
-----------
Please select the type to setting.
_|___________________________________
1| Randomly setting local master key.
2|
Synthesizing local master key by key fragments.
3| Viewing the check value of local master key.
<!>Safety reminder
：
Please keep the key fragments separate and secure.
7.3.
RSA Key Management
7.3.1.
Generate Key Pair
The device supports one RSA key pairs for each index location. The steps are as
follows:
a)
Specify the key location according to the prompted key index range.
Generate RSA key pair:
------------------
Generate new RSA key pair according to key index.
Please input the key index(1-100)(Default index[1]), or [Return(R)] [Next Step(N)]>11
