Store Private Keys on an HSM

On the HSM, import or generate the certificate and private key used in your decryption deployment.
For instructions on importing or generating a certificate and private key on the HSM, refer to your HSM documentation.
(
Thales nShield Connect only
) Synchronize the key data from the Thales nShield remote file system to the firewall.
Synchronization with the SafeNet Network HSM is automatic.
Access the firewall web interface and select
Device
Setup
HSM
.
Select
Synchronize with Remote Filesystem
in the Hardware Security Operations section.
Import the certificate that corresponds to the HSM-stored key onto the firewall.
Select
Device
Certificate Management
Certificates
Device Certificates
and click
Import
.
Enter the
Certificate Name
.
Browse
to the
Certificate File
on the HSM.
Select a
File Format
.
Select
Private Key resides on Hardware Security Module
.
Click
OK
and
Commit
.
(
Forward Trust certificates only
) Enable the certificate for use in SSL/TLS Forward Proxy.
Open the certificate you imported in Step 3 for editing.
Select
Forward Trust Certificate
.
Click
OK
and
Commit
.
Verify that you successfully imported the certificate onto the firewall.
Locate the certificate you imported in Step 3 and check the icon in the Key column:
Lock icon
—The private key for the certificate is on the HSM.
Error icon
—The private key is not on the HSM or the HSM is not properly authenticated or connected.