Command: LO (Load Old keys). The HSM must be in the Secure Authorised state.
Function: To load an old LMK component set into Key Change Storage for use in translations from old to new keys.
Inputs: Smartcards
with old LMK components.
PINs or passwords for the Smartcards.
Outputs: Master key check value.
Errors: Load failed check comparison – card is blank
Not a LMK card – card formatted for HSM settings or is a licence card
Card not formatted – card is not formatted
Smartcard error; command/return: 0003 – invalid PIN is entered
Invalid PIN; re-enter: - a PIN of less than 4 or greater than 8 is entered.
Command only allowed from secure-authorised – the HSM is not in secure state, is not in authorised state, or both.
Example:
Secure-AUTH> LO <Return>
Load Old LMK from components.
Insert card and enter PIN: ***** <Return>
CHECK: XXXX XXXX XXXX XXXX
Load more components? [Y/N]: Y <Return>
Remove the Smartcard. Insert the second and subsequent Smartcards and repeat the loading procedure until all old component sets have been moved into key change storage. When all have been moved and the HSM displays the check value, press N to terminate the procedure.
CHECK: XXXX XXXX XXXX XXXX
Load more components? [Y/N]: N <Return>