Adding an AES Key to the HSM for DataCore vFilO

The WSOP only supports “simple” keys of two types, an AES secret key and an RSA public/private key. For DataCore vFilO, generate an AES secret key using the following command from the WSOP server command line:

# generatekey simple protect=module type=AES size=256 ident=key1 \

plainname=hs-key1 nvram=no

key generation parameters:

operation Operation to perform generate

application Application simple

verify Verify security of key yes

type Key type AES

size Key size 256

ident Key identifier key1

plainname Key name hs-key1

nvram Blob in NVRAM (needs ACS) no

Key successfully generated.

Path to key: /opt/nfast/kmdata/local/key_simple_key1

# generatekey simple protect=module type=AES size=256 ident=key1 \

plainname=hs-key1 nvram=no

key generation parameters:

operation Operation to perform generate

application Application simple

verify Verify security of key yes

type Key type AES

size Key size 256

ident Key identifier key1

plainname Key name hs-key1

nvram Blob in NVRAM (needs ACS) no

Key successfully generated.

Path to key: /opt/nfast/kmdata/local/key_simple_key1