Chapter 8. Using Hardware Security Modules for Subsystem Security Databases
Chapter 8. Using Hardware Security Modules for Subsystem Security Databases A subsystem instance generates and stores its key information in a key store, called a security module or a token . A subsystem instance can be configured for the keys to be generated and stored using the internal NSS token or on a separate cryptographic device, a hardware token. 8.1. Installing Certificate System with an HSM Use the following parameters in the configuration file you pass to the pkispawn utility when installing Certificate System with an HSM:
######################### Provide HSM parameters # ########################## pki_hsm_enable=True pki_hsm_libfile= hsm_libfile pki_hsm_modulename= hsm_modulename pki_token_name= hsm_token_name pki_token_password= pki_token_password ######################################## Provide PKI-specific HSM token names # ######################################## pki_audit_signing_token= hsm_token_name pki_ssl_server_token= hsm_token_name pki_subsystem_token= hsm_token_name