3 ms·
Never really touched one of these HSMs before, what happens if you're using one in production and it dies?
by synicalx 9y ago
Never really touched one of these HSMs before, what happens if you're using one in production and it dies?
- jlgaddis 9y agoYou retrieve the backup HSM and continue on.
- j_s 9y agohttps://news.ycombinator.com/item?id=12069784 https://news.ycombinator.com/item?id=12069784 >mdewinter(2016Jul): They [undisclosed HSM vendor] did, with undocumented commands, export the key from the device in an unencrypted format and loaded it into the other model so that we could continue our operation. (The first comment I ever favorited on HN.)
- synicalx 9y agoWow thanks for the link, that's a bit concerning. Not an expert on HSMs, but this does seem like a fairly serious design flaw?