After updating the settings of an Entrust nShield HSM, perform the following steps in the solutions that use it.

Applying nShield HSM configuration updates to Certificate Authority

After updating the settings of an Entrust nShield HSM, perform the following steps to apply the changes in the Certificate Authority solution.

To apply Entrust nShield HSM configuration updates to Certificate Authority

  1. Export the solution settings to a folder. You can either: 
  2. Replace the kmdata.tar file in the exported settings folder with the kmdata.tar file of your new HSM configuration.
  3. Run the clusterctl solution config import command to import the modified configuration.
  4. Redeploy the solution. You can either:

Applying nShield HSM configuration updates to Validation Authority

After updating the settings of an Entrust nShield HSM, perform the following steps to apply the changes in the Validation Authority solution.

To apply Entrust nShield HSM configuration updates to Validation Authority

  1. Run the evactl export-nshield command to export the nShield settings to a folder. 
  2. Replace the kmdata.tar file in the exported settings folder with the kmdata.tar file of your new HSM configuration.
  3. Run the evactl import-nshield command to import the modified settings.
  4. Redeploy the solution. You can either:

Applying nShield HSM configuration updates to Timestamping Authority

After updating the settings of an Entrust nShield HSM, perform the following steps to apply the changes in the Timestamping Authority solution.

To apply Entrust nShield HSM configuration updates to Timestamping Authority

  1. Run the tsactl export-nshield command to export the nShield settings to a folder. 
  2. Replace the kmdata.tar file in the exported settings folder with the kmdata.tar file of your new HSM configuration.
  3. Run the tsactl import-nshield command to import the modified settings.
  4. Redeploy the solution. You can either: