Actually, i'm using the Thales HSM 8000 and i get this list of RSA command from the HSM manual:
1) Generate a Public/Private Key Pair (EI)
2) Load a Private Key (EK)
3) Translate a Private Key (EM)
4) Import a Public Key (EO)
5) Validate a Public Key (EQ)
6) Validate a Certificate and Import the Public Key (ES)
7) Translate a Public Key (EU)
8) Generate an RSA Signature (EW)
9) Validate an RSA Signature (EY)
10) Import Key under an RSA Public Key (GI)
11) Export Key under an RSA Public Key (GK)
So, i planned to use the command (1) to generate the keypair in HSM and extract the private and public key out from HSM and store in the database (mysql). Then, generate the CSR by retrieve the private and public key from mysql. Can i do this and how to do this?
Main Topics
Browse All Topics
by: ParanormasticPosted on 2009-08-11 at 07:28:43ID: 25069466
1) Read the big insert in the box for setting up the HSM to create the Security World and all that good stuff.
2) The HSM does not initiate the generation of the CSR. Use whatever software to do it with (e.g. the CA installation wizard, IIS wizard, OpenSSL, etc.)
In the wizard or command there should be an option to designate a hardware device / encryption engine / HSM, etc. and select the nCipher CSP. In Windows wizards, this is typically on the screen when you choose the CSP, with the checkbox located under the list.
For OpenSSL use the normal commands, but add in -engine YourHSM.
Not sure which model of HSM you got, but you can use this for a documentation base:
http://iss.thalesgroup.com
Again, make sure you read the insert first to set up the HSM and set up your box to be a client of the HSM. After that, then you can use the doc link above to install whatever you are doing.