CST - hab4_pki_tree.sh generate keys directly to HSM ?

[tomasklein]

Hi,

I would like you to ask, if there is any tutorial, how to use hab4_pki_tree.sh, which generate pki tree directly to the HSM ? In Code - Signing Tool - HSM, there is a part that, you write the private keys to the HSM. For my HSM, I can not write private key to HSM, I need to generate it on HSM. Now I used pkcs11-tool to generate key (pkcs11-tool --module /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so -l --pin 123456 --keypairgen --key-type rsa:4096 --id 10
). Or do I need to modify the hab4_pki_tree.sh to use pkcs11-tool ?

Thanks.

Tomas Klein

[Yuri]

Hello,

    The recent CST 3.2 contains sources, therefore customers can try to

implement own solutions, more suitable for their purposes. 

Have a great day,

Yuri.

-------------------------------------------------------------------------------

Note:

- If this post answers your question, please click the "Mark Correct" button. Thank you!

 - We are following threads for 7 weeks after the last post, later replies are ignored

Please open a new thread and refer to the closed one, if you have a related question at a later point in time.