Skip to main content

SafeNet Client Setup on the HSM

After you have set up a SafeNet Client on a Key Manager Server, you will still need to register the Key Manager Server on the HSM.

The instructions in this section are to be performed on the HSM.

  1. Register the Key Manager Server as a HSM client (replace keymanager-server with an arbitrary name for the Key Manager Server, replace 192.0.2.10 with the IP address of the Key Manager Server):

    lunash:> client register -client keymanager-server -ip 192.0.2.10

    Ensure that the Key Manager Server was registered successfully. You should see the following in the command output:

    'client register successful'
  2. Assign the client to the HSM partition that is reserved for Key Manager use (replace keymanager-server with the name that was previously registered for the Key Manager Server, replace keymanager-partition with the name of the HSM partition reserved for Key Manager):

    lunash:> client assignPartition -client keymanager-server \
    -partition keymanager-partition

    Ensure that the client was successfully assigned to the partition. You should see the following in the command output:

    'client assignPartition' successful.

The Key Manager Server should now be able to connect to the HSM partition.