13.2.2. Installing a SafeNet Hardware Security Module
There are two options for setting up a functionality module:
n
Unsigned Functionality Module: copy the unsigned VACMAN Controller functionality module file –
aal2sdk
– to the machine on which HSM administration will take place. You will have to generate your own self-
signed certificate to sign the module before uploading the signed module into the HSM.
n
Signed Functionality Module: copy the signed VACMAN Controller functionality module file –
aal2sdk.signed
– to the machine on which HSM administration will take place. The corresponding VASCO
code signing certificate is required to upload this signed module (
vascosigningcert.crt
).
The functionality modules are located on the IDENTIKEY Authentication Server product CD in the following folders:
Before installing a functionality module, install the Hardware Security Module with the required drivers and libraries
and restart the machine.
Note
To sign an unsigned VACMAN Controller functionality module with your own self-signed certificate, you need the
mkfm tool, which is included in the Protect Processing Orange Software Development Kit v3.00.
Procedure 24: Installing an unsigned VACMAN Controller Functionality Module
1. Open a terminal.
2. Run the following command to generate a SSL certificate in the user slot:
ctcert c -s
<UserSlotID>
-k -z
<KeySize>
-l
<CertificateName>
where:
n
<UserSlotID>
is the ID of the slot on which the certificate should be generated.
n
<KeySize>
is the length of private key required (minimum size is 1024).
n
<CertificateName>
is the name you want to give the certificate.
3. Enter the requested information.
4. Run the following commands to transfer the certificate to the admin slot:
ctcert x -l
<CertificateName>
-s
<UserSlotID>
-f
<CertExportFileName>
ctcert i -f
<CertExportFileName>
-s
<AdminSlotID>
-l
<CertificateName>
where:
n
<CertificateName>
is the name of the certificate that you entered when generating the cer-
tificate.
n
<UserSlotID>
is the ID of the slot in which the certificate was generated.
13. Hardware Security Module
IDENTIKEY Appliance 3.11.12 - Installation and Maintenance Guide
76
