6 U-HSM Server Replication

An existing U-HSM server can be replicated to one or more new U-HSM servers. As a result, the replicated server gets a copy of the Security World, all HSM keys, imported public keys, the DFK DB and manufacturing keys already existing on the source system.

Note: Programming jobs cannot be replicated, but they can be transferred. The overbuild protection does not allow cloning of any job that may exist in the source system. Job tickets reside inside the physical HSM module, and can only be transferred to the new system along with the physical module. The M-HSM function of U-HSM can be used across physically separate U-HSMs, if they run the same Security World.

The following sections provide instructions for U-HSM server replication.