Private keys

From VACMAN Controller 3.6.11 onwards, the following keys can be created with the Private attribute set to TRUE:

• HSM-level storage key
• HSM-level transport key
• Issuer master key

Before using a key with the Private attribute, the application interfacing with the HSM must:

• Open a session with the slot containing the private key(s) (C_OpenSession)
• Log in with the owner of the key(s) as user (C_Login)

Once logged in, an Authentication Suite Server SDK command using a private key can be addressed to the HSM (C_Digest).

The advantage of using private keys, is that you can restrict key access. For example, when migrating a Virtual Mobile Authenticator under a private storage key, only an application logged in with the correct credentials can use the Virtual Mobile Authenticator.