An open discussion list for topics related to the eduGAIN interfederation service.

[Peter Schober <peter.schober AT univie.ac.at>]

* Leif Johansson <leifj AT sunet.se> [2019-03-28 11:11]:
> It is still a *very* common model - generate on one HSM and use on
> another. There are several reasons you want to do stuff like this
> beyond simple "backup" patterns.

If that exists I'm certainly all for it. It's not like I *want* to own
the processes of secure key creation when the HSM could do it (and
hopefully with a better RNG, at least with Cryptech).

The "create-outside-HSM-then-import" method is simply my workaround
because there is no portability of key material across HSMs (except
the backup/restore between identical models or devices from the same
vendor), AFAIK.
If there's a way to do that even when changing platforms I'm in!

-peter