RCAPI v2.1.1 authenticates Qinsight purely using the RSA private key assigned to the RCAPI user. Qinsight uses this dedicated RCAPI user to not only discover and fetch existing keys but also to securely create new cryptographic keys directly within the HSM simulator. Security Officer (SO) tasks are segregated and performed out-of-band via csadm.
