Imports the nShield Security World configuration so Entrust Validation Authority can use the keys managed by the nShield HSM.
evactl import-nshield -f <kmdata> [-y]
For example:
$ sudo ./evactl import-nshield -f ./kmdata
See below for a description of each option.
Changes will be effective when deploying (or redeploying) the solution with the Management Console or the clusterctl deploy
command.
-f <kmdata>
Import the <kmdata>
configuration, where <kmdata>
is one of the following.
- The path of the nShield
kmdata
folder. - The path of a backup folder generated with the evactl export-nshield command.
- The path of a
tar.gz
backup file generated with the evactl export-nshield command.
See Loading the HSM configuration for considerations on this configuration.
Mandatory: Yes.
-y
Skip the confirmation prompt.