AAL2GenMigrateBlobCmd

Function prototype

aat_int32 AAL2GenMigrateBlobCmd(
                                aat_byte           *Cmd,
                                aat_int32          *CmdSize,
                                TDigipassBlob      *DPData,
                                TKernelParms       *CallParms);

Description

This function creates a command which directs the HSM to migrate the authenticator application BLOB using the given data and to return a result in the form of a reply.

This authenticator application BLOB migration function can be used to:

• Convert a software-encrypted BLOB into an HSM storage key encrypted BLOB (i.e. software-encrypted > HSM-encrypted) ready to be stored in the database.
• Migrate an HSM storage key encrypted BLOB to another HSM storage key encrypted BLOB (i.e. HSM storage key 1 > HSM storage key 2).

To migrate from one HSM storage key to another, the old HSM storage key name must be placed in the parameter CallParms > TransportKeyId, and the new HSM storage key name needs to be placed into the CallParms > StorageKeyId parameter before calling AAL2GenMigrateBlobCmd.

This function must be used with the post-HSM API AAL2ProcMigrateBlobRpl().

You can acquire a software encrypted BLOB using the Digipass Data Import Service of Authentication Suite Server SDK for HSM. This will extract a BLOB but not migrate it. For more information on this service, refer to the Authentication Suite Server SDK for HSM Product Guide.

OneSpan recommends using the new function AAL2GenMigrateBlobCmdEx rather than AAL2GenMigrateBlobCmd.

Parameters

Return codes