Entrust nShield: Creating a Key Encryption Key

Key encryption keys are used to encrypt and protect other cryptographic keys.

To create a key encryption key (Entrust nShield)

1. Open a terminal window.

2. Start the OneSpan Key Management Tool for Entrust nShield, by default /opt/vasco/ias/bin/manager-xc.

3. Select an HSM ID to use for the key creation process.
4. Insert the administrator or operator card into a card slot.
5. Enter the ID of the slot in which the administrator/operator card is inserted.
6. Select option 3, i.e. (3) Generate a Key Encryption Key.

The OneSpan Key Management Tool for Entrust nShield will walk you through the configurations of the key encryption key.