<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
span.emailstyle17
{mso-style-name:emailstyle17;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=NL link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><br>
When you say that you can manually create keys, do you mean that you can run
ods-ksmutil key generate?<br>
<br>
</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";
color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'>If
you have not tried that could you do so?<br>
<br>
</span><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif";
color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>They were manually
created with the Luna SA client. When using ‘key generate’ nothing
would be generated.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>By running ‘ods-ksmutil
setup’ and clearing the HSM of any keys, it is running again. But I don’t
understand why the keys in the kasp.db weren’t purged since they were not
in use by any zone. It was also not corresponding to the key list listed by the
HSM at that time:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>[root@signer1 ~]#
ods-hsmutil list luna<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Listing keys in
repository: luna<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>14 keys found.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Repository
ID
Type<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>----------
--
----<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
4cbe955b68f0201299537e51ca391a9f RSA/1024<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
c24a8dd3ab0f409d25c1ffce6eb7acad RSA/2048<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
eb4a7c10f974cdc23edf2bf19bd7925e RSA/2048<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
404baab6dc60fef4342d1680d8ba700990d55197 RSA/1024<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
829c9404b3b8b0f504904419691d587de9b34614 RSA/2048<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
3d1c8641da88ba9e14af9f647d1c69cf RSA/1024<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
c04797e33c6ccc998ecf9e67d1d76a872d643172 RSA/1024<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
cf33fc0fd6758124bf45e375c057631fb722a555 RSA/1024<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
f0aa22d8c7d2e84ca9645fabec41de1d RSA/2048<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
955506bafe1fbfac64454489f3189667 RSA/2048<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
d1b3af3e062ed1413c7785df7197228b RSA/2048<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
61a39bbb3dc9287509c7955ffcd8a8d3 RSA/2048<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>luna
e5bd27be08ab78c1cebe152b91aa4620 RSA/1024<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>luna
5ed8fbe39e752e7760fdf4c7580e24dd RSA/1024<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Not all of these keys
were present in kasp.db. Also didn’t pregenerate any keys when comparing,
so I would expect the old keys to be purged.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>I am gonna do some
more testing on this matter and let you know as soon as I have any new
findings.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Cheers,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Rick<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p>
</div>
</body>
</html>