495 questions
0 votes
0 answers
26 views
Optiga Trust M on PSoC6 dev kit
I am trying to use the optiga trust m module of the CYSBSYSKIT-DEV-01 development kit. I am trying to write a client private key which i already have with me to one of the ECC Slots(0xE0F1, 0xE0F2, ...
4 votes
3 answers
202 views
Install4J v8 PKCS#11 Code Signing with Google Cloud KMS (libkmsp11.so) - Certificate Not Found
As a long-time user of Install4J, I appreciate its robust, direct implementation of code signing since version 5.1, which leverages open standards and eliminates the need for external tools like ...
0 votes
0 answers
59 views
PDF external signing get "Signature is invalid"
I tried to sign PDF with nodejs using pkcs11js connect to HSM for signing. The result of certificate show as picture and has been transcribed as follows: This file claims compliance with the PDF/A ...
0 votes
0 answers
127 views
Google Cloud KSM Error: Exception in thread "main" java.lang.NoClassDefFoundError: com/google/protobuf/MapFieldReflectionAccessor
💻 Environment: Java Version: Corretto 17.0.8 Google Cloud KMS library: google-cloud-kms:2.38.0 Build Tool: Maven IDE: IntelliJ IDEA Community Edition 📦 Dependencies (pom.xml): <dependencies> &...
0 votes
0 answers
53 views
Input format for public key in EU command on payShield 10K
I'm working with a Thales payShield 10K and trying to use the EU command to translate a public key under new LMK. I currently have the key available in PEM, DER, and HEX formats. However, according to ...
0 votes
1 answer
124 views
How to open a connection with Azure iot hub with proof of possession challenge
Using X.509 certificate stored in a hardware security module (HSM), how can my IoT device establish a secure connection with IoT hub doing proof of possession challenge? All samples I have seen assume ...
-2 votes
1 answer
83 views
Signing XML using PKCS11, HSM token
public static byte[] DoSignXML_old(string inputfile, HSMProperties pro, ref ISession session) { try { // Load the XML document XmlDocument XDoc = new XmlDocument(); ...
0 votes
1 answer
60 views
Using AWS Cloud HSM to store the Android signing keys
For Android app development, we store APK signing keys in a .jks file (Java Key Store). Of course we protect the keys by using passwords. To enhance security, we are considering using Cloud HSM to ...
0 votes
0 answers
48 views
Signing xla macros using certificate stored in Azure key vault with HSM
We have been fetching the signing certificate from the Azure Key Vault and adding it to the local Windows store, which allows for the signing of macros in the .xla application through Excel. var ...
0 votes
0 answers
40 views
ClickOnce Signing After Publish
I am trying to get a ClickOnce application signed properly, after publishing, including the application files (exe, dll, application file, manifest). Because I am using HSM (Specifically DigiCert One) ...
0 votes
1 answer
71 views
Alternative way of setting ADC for google cloud to run on read-only pipeline systems?
I'm trying to use the kms module which requires ADC which expects GOOGLE_APPLICATION_CREDENTIALS which is a json credential file. So I aim to pass the necessary project_id, location_id etc. as secrets ...
0 votes
1 answer
128 views
Azure Managed HSM: Decrypt in C# using encryption result from Azure CLI
I'm encrypting a string using Azure CLI: az keyvault key encrypt --id "https://myhsmtest.managedhsm.azure.net/keys/aes256/1234aed127f8009e15d6c3a883b91f21" --algorithm A256GCM --value "...
0 votes
2 answers
617 views
Pkcs#11 with Luna Cloud HSM: private key listed with cmu list is not found in Java KeyStore
Connecting to Luna Cloud HSM I am able to add a RSA private key to the HSM (either by cmu importkey or by cmu gen) and the command-line tool cmu list displays this key from the server. I am connecting ...
1 vote
1 answer
537 views
How to delete public keys from a PKCS#11 security token in Java?
I would like modify a software which was written in Java. The software should be able to create public and private keys on a HSM and also be able to delete them. I would like to do these tasks by ...
0 votes
2 answers
450 views
CKR_TEMPLATE_INCONSISTENT error while creating key on the hsm
I am getting CKR_TEMPLATE_INCONSISTENT error while trying to create a key on the hsm. I am using PKCS11 C# wrapper. public void GenerateKeyByName(ISession session, string keyName, string keyContent,...