cfg-pushnethsm

cfg-pushnethsm [-p PORT -a ADDR -f -k -m MODULE] FILE

Copies a specified configuration file from a remote file system to the file system on a specified module.

Some changes propagated with cfg-pushnethsm need further actions. For example, you have to clear the module after changing the dynamic slot configuration.

Option Description

-a, --address=ADDR

Network address of the network-attached HSM to push configuration file to, or "" (quotation marks without any content between) to just validate the file.

cfg-pushnethsm --address=<module_IP_address> <full_path_to_config_file>

<module_IP_address> is that of the nShield Connect on which to load the configuration and <full_path_to_config_file> is the path to, and name of the updated configuration file. For example:

/opt/nfast/bin/cfg-pushnethsm –address 192.168.156.30 /opt/nfast/kmdata/hsm-49D5-C944-F159/config/config.new

Default: "".

-f, --force

Pushes the configuration file even if validation check fails.

-k, --use-kneti

Uses a local module KNETI to authenticate this client to the network-attached HSM. If no KNETI is specified with this -k option, the hardserver’s software KNETI is used.

-m, --module=MODULE

Uses this module’s KNETI. This -m option is ignored unless --use-kneti is used.

Default: 1.

-n, --no-rfs-check

Overrides the RFS check.

-p, --port=PORT

Sets the port to use to connect to the network-attached HSM.

Default: 9004

Help options

-h, --help

Displays help for cfg-pushnethsm.

-u, --usage

Displays a brief usage summary for cfg-pushnethsm.

-v, --version

Displays the version number of the Security World Software that deploys cfg-pushnethsm.