In case the MBK was not imported, when it was generated, or if you want to upload it to another HSM, you need to import it from the keyfiles or smartcards that carry its parts. The MBK was divided into multiple parts by using Shamir’s Secret Sharing or XOR and can be restored by using the “m out of n” or XOR principle.
-
Make sure that at least m out of n smart cards/keyfiles are available.
-
Open the CryptoServer Administration Tool.
-
Achieve the permission level of at least 02000000.
-
Click Manage MBK to access the Remote Master Backup Key Management window and select the Import tab.
-
Select the type of MBK that will be imported and the value m.
-
Click Import.
-
Select whether to save the MBK parts on smartcards or as keyfiles by selecting either Smartcard Token or Keyfile Token option.
-
Follow the instructions to import all of the m parts.