[Pki-users] Dogtag 10 HSM Support

[Christina Fu]

On 10/19/2016 07:46 AM, Endi Sukma Dewata wrote:
> On 10/19/2016 6:29 AM, Elliott William C OSS sIT wrote:
>> Hi,
>>
>> What is the current status of HSM Support?
>> We tried to setup Dogtag 10 on RHEL7 with Safenet Luna SA HSM earlier 
>> this year, but creating a CA didn't seem to support using a HSM as 
>> the version 9 did.
>> Is this working now? Should it work? Will it work in the future?  
>> Without it, we must use a different CA.
>>
>> Thanks in advance!
>>
>>     William Elliott
>
> Hi,
>
> Dogtag 10 does support HSM including Luna SA. Please take a look at 
> this page:
> http://pki.fedoraproject.org/wiki/Installing_CA_with_HSM
>
> Just be sure to use the latest available version.
>

Right.  Just want to stress that older versions of the lunaSA firmware 
exhibit issues which were somehow fixed in the latest firmware v6.24.0 I 
think.

Christina