Loading the master key automatically
The CNM utility can automatically set a master key in the coprocessor. The master key value cannot be viewed from the utility.
Important: If a master key of unknown value is lost, you cannot decipher the key attached to it.
To automatically load the master key, follow these steps:
- From the Load Master Key window, click Master Key.
- From the Master Key menu, select either DES/PKA Master Keys or AES Master Key.
- Select Auto Set or Random. You are prompted to verify the command.
- Click Yes. The coprocessor generates and sets a master key.
Note:
- The Random option is preferred because the Auto Set option passes clear key parts through host-system memory.
- When you set or automatically set a master key, you must reeincipher all keys that were enciphered under the former key.