TSM500i and TsmWeb User Guide (PCI HSM v3) (PR-D2-1037 Rev 1.1)
| Page 20
Zazoo Limited, Co. No 9265606 | Directors: Dr S C P Belamant (French),
Mr H G Kotze, Mr P M Belamant | Company Secretary: Ms C W van Straaten
www.zazooltd.com
The crypto officers must keep a record of their passwords in a safe place and
ENSURE THAT THEY FULLY UNDERSTAND THE CONSEQUENCES OF LOSING THEIR PASSWORDS!
If all crypto officers forget their passwords, there is NO way to reset the HSM passwords without
ERASING ALL CSPs.
On successful completion of the above step, the HSM will have been authenticated to have originated
from the Manufacturer and verified to have not been modified.
2.8.4
Add additional crypto officers
Refer to section 3.1 for instructions on how to ADD additional Crypto Officers.
The above HSM authentication process included setting up passwords for the two crypto officers
that took control of the HSM. If all crypto officers forget their passwords, there is NO way to reset
passwords WITHOUT ERASING ALL CSPs.
Because the HSM requires dual control for all sensitive operations, it is strongly recommended that
the crypto officers add at least one more crypto officer during initial deployment.
