Dogtag 10 HSM Support
Hi, What is the current status of HSM Support? We tried to setup Dogtag 10 on RHEL7 with Safenet Luna SA HSM earlier this year, but creating a CA didn't seem to support using a HSM as the version 9 did. Is this working now? Should it work? Will it work in the future? Without it, we must use a different CA. Thanks in advance! William Elliott
On 10/19/2016 6:29 AM, Elliott William C OSS sIT wrote:
Hi,
What is the current status of HSM Support? We tried to setup Dogtag 10 on RHEL7 with Safenet Luna SA HSM earlier this year, but creating a CA didn't seem to support using a HSM as the version 9 did. Is this working now? Should it work? Will it work in the future? Without it, we must use a different CA.
Thanks in advance!
William Elliott
Hi, Dogtag 10 does support HSM including Luna SA. Please take a look at this page: http://pki.fedoraproject.org/wiki/Installing_CA_with_HSM Just be sure to use the latest available version. -- Endi S. Dewata
On 10/19/2016 07:46 AM, Endi Sukma Dewata wrote:
On 10/19/2016 6:29 AM, Elliott William C OSS sIT wrote:
Hi,
What is the current status of HSM Support? We tried to setup Dogtag 10 on RHEL7 with Safenet Luna SA HSM earlier this year, but creating a CA didn't seem to support using a HSM as the version 9 did. Is this working now? Should it work? Will it work in the future? Without it, we must use a different CA.
Thanks in advance!
William Elliott
Hi,
Dogtag 10 does support HSM including Luna SA. Please take a look at this page: http://pki.fedoraproject.org/wiki/Installing_CA_with_HSM
Just be sure to use the latest available version.
Right. Just want to stress that older versions of the lunaSA firmware exhibit issues which were somehow fixed in the latest firmware v6.24.0 I think. Christina
participants (3)
-
Christina Fu -
Elliott William C OSS sIT -
Endi Sukma Dewata