New Post: generate keys

Dear all,

I am a newbie to Thales HSM.

I need three 128 bits keys, TPK, TMK and base key. TPK and TMK need to transmit from server side to client side over network. Therefore will be encrypted before transmission. TPK will be encrypted by TMK and TMK will be encrypted by base key. Base key will be send to client manully. Client side cannot communicate with HSM.

I am not sure how to generate above 3 keys from HSM. Is it using A0, HC, combination of both or some other commands? Is the TMK and TPK generated from HSM are in encrypted form or I need to encrypt by myself before transmit over the network. If in encrypted form, is it possible to follow the algorithm, base[TMK[TPK]], mentioned above.

Thanks in advance for all your helps.

Best regards,
Chris.