Generate new KSK and ZSK

  1. Generate a new key pair as ksk1and zks1 on HSM as shown below.

›_ Console

# p11tool2 slot=0 LoginUser=ask PubKeyAttr=CKA_LABEL=”ksk1” PrvKeyAttr=CKA_LABEL=”ksk1” GenerateKeyPair=RSA 

# p11tool2 slot=0 LoginUser=ask PubKeyAttr=CKA_LABEL=”zsk1” PrvKeyAttr=CKA_LABEL=”zsk1” GenerateKeyPair=RSA