HSM/Keys/Creating

OpenDNSSEC > HSM > Keys? > Creating Keys

To create keys in an HSM you must use PKCS11. Unfortunately, it is our experience that many HSM's do not come with simple tools to create keys. This page provides some examples of how to do this.

Existing Software

OpenSC

pkcs11-tool --module=/path/to/pkcs11/lib -O --slot 0 -k --key-type rsa:1024 -p 1234
Key pair generated:
Private Key Object; RSA 
  label:      
  Usage:      decrypt, sign, unwrap
Public Key Object; RSA 1024 bits
  label:      
  Usage:      encrypt, verify, wrap

Write your own

There are some examples here  http://blog.nominet.org.uk/tech/category/crypto/ in particular see  http://blog.nominet.org.uk/tech/2007/02/13/using-a-sca6000-part-2/