Luna Pcie Hsm 7 Hsm Administration Guide

The HSM overwrites the memory location with zeros. No rm -rf recovery exists.

HSM keys are non-exportable in plaintext. You must wrap them: Luna PCIe HSM 7 HSM Administration Guide

Guidance on balancing isolation with manageability. While the PCIe model typically supports a single partition, the guide helps you decide if that's sufficient for your application load. Key Ceremony Design: The HSM overwrites the memory location with zeros

Note: The Backup_KEK must be an AES-256 key also stored on the HSM. Luna PCIe HSM 7 HSM Administration Guide

cm> key delete -label "Old_Corporate_CA"

Within a partition, the Partition Owner is the primary administrator. The guide explains how this role manages the day-to-day cryptographic operations: