Thales payShield 10K - Generate KTK Components (KM)

payShield 10K Installation and User Guide
©Thales Group
Page 441
All Rights Reserved
Restore HRK (SL)
Variant

Key Block

Online

Offline

Secure

Authorization: Not required
Command:
SL
Function:
To restore the HRK (and also the secret key material backed-up by the HRK)
in the event of erasure of tamper protected memory.
Authorization:
The HSM must be in the secure state to run this command.
Inputs:
• Passphrases 1 & 2.
Outputs:
• Prompts, as above.
• Restoring HRK message.
• Key synchronization message.
Errors:
• HRK already loaded.
Notes:
• The HRK replaces the RMK (used in previous versions of software).
Example 1:
This example demonstrates the use of the SL console command to
generate an HRK.
Secure> SL <Return>
Enter administrator 1 passphrase: ********************
Enter administrator 2 passphrase: **************
Recovering HRK. Please, wait ... DONE
HRK recovered successfully
Key synchronization complete
Secure>