Great - we'll give it a try. as a side note: we had issues last year with Dogtag 9 and the latest fw at the time, and were unable to resolve them with safenet support. We stayed with an older fw version (at startup, dogtag calls to hsm reliably *killed* the internal connection of the appliance itself to the hsm unit - rendering all partitions dead and requiring reboot of the appliance - very nasty) Thanks for the prompt reply. Cheers, William -----Original Message----- From: pki-users-bounces(a)redhat.com [mailto:pki-users-bounces@redhat.com] On Behalf Of Christina Fu Sent: Mittwoch, 19. Oktober 2016 19:22 To: pki-users(a)redhat.com Subject: Re: [Pki-users] Dogtag 10 HSM Support [heur] On 10/19/2016 07:46 AM, Endi Sukma Dewata wrote: > On 10/19/2016 6:29 AM, Elliott William C OSS sIT wrote: >> Hi, >> >> What is the current status of HSM Support? >> We tried to setup Dogtag 10 on RHEL7 with Safenet Luna SA HSM earlier >> this year, but creating a CA didn't seem to support using a HSM as >> the version 9 did. >> Is this working now? Should it work? Will it work in the future? >> Without it, we must use a different CA. >> >> Thanks in advance! >> >> William Elliott > Hi, > > Dogtag 10 does support HSM including Luna SA. Please take a look at > this page: > http://pki.fedoraproject.org/wiki/Installing_CA_with_HSM > > Just be sure to use the latest available version. > Right. Just want to stress that older versions of the lunaSA firmware exhibit issues which were somehow fixed in the latest firmware v6.24.0 I think. Christina _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users