}
subject {
CN=MasterAudit,
OU=Identikey,
O=VASCO,
C=US
}
keyusage {
digitalSignature,
nonRepudiation,
keyCertSign
}
After configuring an attributes file, perform the following steps in order to create a Master Audit keypair cer-
tificate for SafeNet:
Procedure 26: Create the Master Audit Keypair certificate
1. Generate the self signed certificate using the ctcert tool. A sample of the
ctcert
command is :
ctcert c -t ec -Csecp256r1 -d1825d -k -lMasterAuditKey -s0 -xattributes.txt
where:
n
ec
means create an Elliptic Curve key.
n
-Csecp256r1
means to create the key using this type of elliptic curve
n
1825d
creates a certificate which has a validity period of 1825 days from the date this com-
mand is run
n
MasterAuditKey
will be the label of the private key created on the HSM device.
n
-s0
means create this keypair /certificate on the HSM slot 0
n
attributes.txt
is the attributes file previously created.
You will be prompted to enter the user pin for the specified slot (i.e. slot 0 in this case).
2. Extract the public certificate from the device and save it to a .pem file:
ctcert x -lMasterAuditCertificate -s0 -faudit_cert.pem
where:
13. Hardware Security Module
IDENTIKEY Appliance 3.11.12 - Installation and Maintenance Guide
81
