PCI-HSM 2016 compliance mode
The IBM® HSM provides a mode that enforces compliance with PCI-HSM requirements when compliance-tagged symmetric keys or compliant X.509 certificates are used. The TKE administrative workstation is used to set the IBM HSM to the compliance mode by using a dual-control process. The TKE can also display whether the IBM HSM is currently in compliant mode.