Breadcrumbs

Wrapping HSM Key

  1. Convert the public key downloaded from Salesforce to der format with the help of the openssl command.

›_ Console 

> openssl rsa -in public.key -pubin -out public.der -outform der
tmptjpi15nt.jpg

Converting public key to der format

  1. Navigate to the folder where you have the byoktool saved. Execute the following command to wrap the key material by using the public key in der:

›_ Console 

> byoktool dev=<Utimaco_CryptoServer_HSM_IP> LogonPass=<user>,<user_password> 

Label="<key_label>" csp=salesforce publickey=<downloaded_salesforce 

_certificate> wrappedkey=WrappedKey.dat hash=Hash_of_wrapped_key.hash
tmpv9i8fm36.jpg

Wrapping HSM key using byoktool

Make sure to have appropriate permissions to be able to generate and wrap keys on the HSM as well as to write files in the directory.