An open discussion list for topics related to the eduGAIN interfederation service.

[Leif Johansson <leifj AT sunet.se>]

On 2019-03-28 10:33, Peter Schober wrote:
> * Alan Lewis <alan.lewis AT geant.org> [2019-03-28 10:21]:
>> Yes I agree that generating the keys outside the HSM has benefits in
>> terms of key backup and recovery. The key thing is that the process
>> for doing this is itself secure. I don’t know what mechanisms the
>> USB tokens have to do this, so it would be useful to take a look if
>> you can point me at any examples.
> 
> I think the point he (and Shannon and myself) was making is that if you
> generate key material outside the HSM by defintion the HSM can do
> nothing for you to make this (more) secure, i.e., it's all in your own
> processes.

It is still a *very* common model - generate on one HSM and use on
another. There are several reasons you want to do stuff like this
beyond simple "backup" patterns.

> FWIW, here are Guy's notes for provisioning the Nitrokey "HSM" model:
> https://safire.ac.za/wp-content/uploads/2017/02/NitrokeyHSMPrepNotes.pdf
> 
> -peter
>