Sansec HSM User Manual V2.2
29
sensitive information, such as the RSA private key, ECDSA private key and SM2 private
key, and the symmetric key using this backup key and save it into a file. Export the
backup files through FTP and keep them in good order. The detailed steps are as follows:
a)
Log in at least half of all administrators to obtain super administrator rights.
Prepare 3 administrator tokens which will be used to store the backup key
segments.
Key backup wizard:
-------------
1. Start backup key
Log in at least half of all administrators to obtain super administrator rights and prepare
three administrator tokens.
b)
Output the 3 backup keys segments. This procedure requires the insertion of the
token and inputting the PINs.
2. Output the first backup keys segment.
Please select an administrator USB token to insert the USB port in the correct direction
and enter the protection password.
Please enter USB token password or [Quit(Q)]>
3. Output the second backup keys segment.
Please select another administrator USB token to insert the USB port in the correct
direction and enter the protection password.
4. Output the third backup keys segment.
Please select the third administrator USB token to insert the USB port in the correct
direction and enter the protection password.
c)
Encrypt keys and other data using the backup key and back it up into a file.
Key backup wizard:
-------------
5. Generating the backup file.
The backup process is being performed, in the process the key data is encrypted and saved to
the backup file.
The key information and other information have been encrypted and saved to the backup file.
Please continue or [Quit(Q)] [Return(R)]>
d)
Start the FTP service, then download the backup file "swhsmbak.dat" to the local
