IBM Computer Hardware 2 User Manual download pdf (Page 110)

100

101

CCA Release 2.54

Using the Private Key at Multiple Nodes

You can arrange to use a private key at multiple nodes if the nodes have the same

asymmetric master-key, or if you arrange to have the same transport key installed

at each of the target nodes. In the latter case, you need to arrange to have the

transport key under which the private key is enciphered installed at each target

node.

Having the private key installed at multiple nodes enables you to provide increased

service levels for greater throughput, and to maintain operation when a primary

node goes out of service. Of course, having a private key installed at more than

one node increases the risk of someone misusing or compromising the key. You

have to weigh the advantages and disadvantages as you design your system or

systems.

Extracting a Public Key

CCA PKA key generation returns a public-private key-pair in a single key-token

(provided your application is not retaining the private key within the Coprocessor).

You can obtain a key token with only the public-key information using the

PKA_Public_Key_Extract verb.

If you use the public-private key token in verbs that only require the public key, the

implementation may attempt to recover the private key which in the usual case

would fail (since normally the private key should not be usable where use is being

made of the public key).

Registering and Retaining a Public Key

You can use the PKA_Public_Key_Hash_Register and the

PKA_Public_Key_Register verbs to “register” a public key in the secure

cryptographic engine under dual-control. Authorize the related commands in two

different roles to enforce a dual control policy. Your applications can subsequently

reference the registered public key stored within the engine with the confidence that

the key has been entered under dual control. Note that the

Master_Key_Distribution verb makes use of registered RSA public keys in the

master-key shares distribution scheme.

3-6 IBM 4758 CCA Basic Services, Release 2.54, February 2005

1 2 ... 105 106 107 108 109 110 111 112 113 114 115 ... 507 508

Comments to this Manuals

No comments

IBM Computer Hardware 2 User Manual Page 110

Comments to this Manuals

Related products and manuals for Software IBM Computer Hardware 2