Replacing or Upgrading Atalla HSM from Ax160 to AT1000

The Utimaco Atalla Ax160 HSM is no longer in support. We provide a migration for SecureData districts generated with Ax160 to AT1000. Contact OpenText Support for information.

If you are replacing or upgrading an Atalla HSM from version Ax160 to version AT1000, perform the following steps to make sure the new Atalla HSM contains the same MFK to support the existing districts:

  1. Back up the MFK from the existing Ax160. Refer to the Atalla HSM and Atalla Secure Configuration Assistant-3 (SCA-3) documents for this operation.

  2. Disable the HSM check box from the Management Console. Go to System > Advanced., then clear (disable) the Atalla HSM Enabled check box and click Save Settings.

  3. Restart the vsmgmt service and deploy.

  4. Restore the MFK you backed up in Step 1 to the new or upgraded Atalla HSM. Refer to Atalla HSM and Atalla Secure Configuration Assistant-3 (SCA-3) documents for this operation.

  5. If you are upgrading from Ax160 to AT1000, generate an AES MFK (AMK) on AT1000 prior to adding this HSM to the SDA.

  6. Add the new Atalla IP address to the SDA.

  7. Enable the HSM check box from the Management Console. Go to System > Advanced., then select (enable) the Atalla HSM Enabled check box and click Save Settings.

  8. Restart the vsmgmt service and deploy.