Managing HSM slots

Registering a Slot

Slot are registered on a Module, i.e. you need to register a Module first prior to registering a Slot.

Step 1: Access the OCSPd Web Management Console;

Step 2: In the 'Configuration' left menu, select 'Hardware Security Modules':

HSM Menu

Step 3: Hit the Register Slot button of the Module for which you are willing to register a Slot:

Register Slot Menu

Step 4: Specify:

  • 'Slot ID' (select): ID of the Slot on the PKCS#11 Module;

  • 'PIN': the slot PIN;

  • 'Worker(s)': the number of concurrent sessions to open on the slot (limited to '5' by default, but this can be increased by tweaking the configuration).

And hit the 'Register' button:

Register Slot

Step 5: The Slot is successfully registered:

Slot Registered
Slot Registered

Modifying the Slot PIN

Step 1: Access the OCSPd Web Management Console;

Step 2: In the 'Configuration' left menu, select 'Hardware Security Modules':

HSM Menu

Step 3: Hit the Change PIN button of the Slot for which you are willing to modify the PIN:

Slot Change PIN Menu

Step 4: Specify the new Slot PIN and hit the 'Set' button:

Slot Change PIN

Step 5: The Slot PIN is successfully set:

Slot PIN changed

Modifying the Slot Worker(s)

Step 1: Access the OCSPd Web Management Console;

Step 2: In the 'Configuration' left menu, select 'Hardware Security Modules':

HSM Menu

Step 3: Hit the Change Workers button of the Slot for which you are willing to modify the Worker(s):

Slot Worker Menu

Step 4: Specify the new 'Worker(s)' value and hit the 'Set' button:

Slot Set Worker

Step 5: The Worker(s) is successfully set:

Slot Worker successfully set

Unregistering a Slot

A Slot cannot be unregistered if it is referenced by a Signer, i.e. the Signer storing its private key within the considered Slot must be deleted first.

Step 1: Access the OCSPd Web Management Console;

Step 2: In the 'Configuration' left menu, select 'Hardware Security Modules':

HSM Menu

Step 3: Hit the Unregister Slot button of the Slot you are willing to unregister:

Slot Unregister Menu

Step 4: Hit the 'Confirm' button:

Slot Unregister

Step 5: The Slot is successfully unregistered:

Slot successfully unregistered