3.4.3 Create NVRAM-based Partition in HSM Module

This step uses the nvram-sw utility to create a storage partition in non-volatile memory of the HSM module for storing information that must be physically uncloneable. Figure 3-9 shows output during NVRAM partition creation.

To run this action:

  • The module must be in the operational mode.
  • The ACS (admin) cards must be inserted into the card reader according to the quorum number specified during creation of the Security World. Enter the following command to create NRAM:

    nvram-sw.exe -a -b 8096 -n udsigner -k seeinteg,userdata-signer

The -b parameter specifies partition size in bytes. The value of 8096 specifies partition size. This value is fixed in the current version of the M-HSM server.

Note: The -k parameter must follow the exact format: comma separated values with no spaces.
Figure 3-9. Creating ENVM Storage Inside HSM Module