payShield 10K Installation and User Guide
©Thales Group
Page 353
All Rights Reserved
Retrieve HSM Settings from a Smartcard (RS)
Variant
Key Block
Online
Offline
Secure
Authorization:
Required
Activity:
admin.console
Command:
RS
Function:
To read the Alarm, Host Port, Security, Audit, Command, and PIN Block settings from
a smartcard. The user is then prompted to use these to overwrite the existing HSM
settings. If the settings on the smartcard were saved using a configuration command
(CL, CH, CS and AUDITOPTIONS), then only those settings are overwritten.
Authorization:
The HSM must be in the secure state to run this command. Additionally, the HSM
must be either in the Authorized State, or the activity
admin.console
must be
authorized, using the Authorizing Officer cards of the Management LMK.
Inputs:
•
Whether to overwrite each of the groups of saved settings.
Outputs:
•
The Alarm, Host, Security, Audit, Command, and PIN Block settings stored on the
smartcard are listed.
Errors:
•
Card not formatted to save/retrieve HSM settings.
Attempt with another card? [Y/N] - card is not formatted for storing HSM settings.
•
Card not formatted. Attempt with another card? [Y/N] - card is not formatted.
•
Command only allowed from Secure-Authorized - the HSM is not in Secure State, or
the HSM is not authorized to perform this operation, or both.
