SafeNet Luna HSM
Before you begin
You'll need:
Client certificate for the HSM.
Client private key for the HSM.
All the HSM server certificates in PEM format.
All the HSM partition passwords.
The IP address of the HSMs.
To set up a SafeNet Luna HSM:
In DigiCert ONE, in the Manager menu (top right), select CA.
In the CA Services menu, select HSM > SafeNet.
Enter a friendly client name (optional).
Add the client certificate.
Add the client private key.
Select Add HSM server:
Provide the IP and port for the server.
Add the server certificate.
Select Create.
Select Register partition:
Select a partition.
Enter the password for the partition.
Enter a display name.
Select the allowed uses for the partition. (optional)
Select which accounts can use this HSM partition.
Select Register partition.
Select Add HA group (high availability groups, optional):
Enter a group name.
Select group members.
Select Create.
Follow the instructions in Step 7 to register the newly created HA group partition.
Disabling the HSMs
Disable all SafeNet HSMs by clicking the disable button above the table of contents menu.