After updating the settings of an Entrust nShield HSM, perform the following steps in the solutions that use it.

Applying nShield HSM configuration updates to Certificate Authorities

After updating the settings of an Entrust nShield HSM, perform the following steps to apply the changes in the Certificate Authorities solution.

To apply Entrust nShield HSM configuration updates to Certificate Authorities

  1. Export the solution settings to a folder. You can either: 
  2. Replace the kmdata.tar file in the exported settings folder with the kmdata.tar file of your new HSM configuration.
  3. Run the clusterctl solution config import command to import the modified configuration.
  4. Redeploy the solution. You can either:

Applying nShield HSM configuration updates to Entrust Validation Authority

After updating the settings of an Entrust nShield HSM, perform the following steps to apply the changes in the Entrust Validation Authority solution.

To apply Entrust nShield HSM configuration updates to Entrust Validation Authority

  1. Run the evactl export-nshield command to export the nShield settings to a folder. 
  2. Replace the kmdata.tar file in the exported settings folder with the kmdata.tar file of your new HSM configuration.
  3. Run the evactl import-nshield command to import the modified settings.
  4. Redeploy the solution. You can either:

Applying nShield HSM configuration updates to Timestamping Authority

After updating the settings of an Entrust nShield HSM, perform the following steps to apply the changes in the Timestamping Authority solution.

To apply Entrust nShield HSM configuration updates to Timestamping Authority

  1. Run the tsactl export-nshield command to export the nShield settings to a folder. 
  2. Replace the kmdata.tar file in the exported settings folder with the kmdata.tar file of your new HSM configuration.
  3. Run the tsactl import-nshield command to import the modified settings.
  4. Redeploy the solution. You can either: