4 ms·
That wouldn't work because HSMs are typically not delivered with keys, you generate the private key yourself.
by amaccuish 8y ago
That wouldn't work because HSMs are typically not delivered with keys, you generate the private key yourself.
- titzer 8y agoOk, makes sense. It could also be that the HSM was shipped from one office to another after keys had been loaded onto it. Dunno.
- erkkie 8y agoIn "secure" places, HSM's are basically in a vault with armed guards.
- slowburning 8y agoI have seen HSMs in a concrete fireproof room, inside another concrete room, inside a regular room, inside a nondescript building. This one required the use of 3 persons (one to authorize entry past the 2 guys with rifles, one to unlock the vault rack with the hsm, another to authenticate to the HSM to perform work).
- irundebian 8y agoCompany or agency?
- slowburning 8y agoa very large private company
- amaccuish 8y agoHSMs are designed to resist exporting private key material. And to sign something, you normally have to enter a PIN or a password. :)