0

I'm just practising about Safenet soft HSM and PKCS11interop library. I am curios about how the librar decides to connect which HSM? I think the cryptoki library created in my local is configured to use local soft HSM. But I couldn't find any documentation about this behaviour. Where can I find which HSM address the library use? Can I change the connected HSM programatically?

My main purpose is use different HSM's for cryptographic operations according to some conditions.

Thank you.

I searched for information about HSM address which is used by PKCS11interop library, but could not find anything about it.

EyezBerg
  • 1
  • 2

1 Answers1

0

The PKCS11interop library is a .NET implementation of the PKCS#11 standard for accessing cryptographic devices, including hardware security modules (HSMs). The library does not itself decide which HSM to connect to; rather, the application that uses the library will determine which HSM to use.

Typically, the application will specify the HSM to use by providing the appropriate parameters to the library. These parameters might include the HSM's IP address, port number, authentication credentials, and so on. The PKCS11interop library provides a number of classes and interfaces for managing the connection to the HSM, including the Pkcs11 class, which represents the PKCS#11 API, and the Slot class, which represents a slot on the HSM.

To change the connected HSM programmatically, you would need to modify the application code that uses the PKCS11interop library to specify a different set of parameters for connecting to the new HSM. Alternatively, you could create multiple instances of the Pkcs11 class, each with different parameters, and switch between them as needed.

It's worth noting that different HSMs may have different capabilities and support different cryptographic algorithms, so you'll need to ensure that the HSM you choose is capable of performing the operations you require. Additionally, you'll need to ensure that the HSM is properly configured and that your application is authorized to access it.

kishanpokar
  • 11
  • 1
  • I couldn't find which properties to set for changing HSM IP address and port. I would be appreciated if you could show me how. – EyezBerg Mar 16 '23 at 09:16
  • The method for that is implementation dependent. It should be in the documentation from the HSM provider. – rip... Apr 21 '23 at 17:05