Re: [OpenXPKI-devel] OpenXPKI/CLCA Integration with Yubico YubiHSM 2

[Scott T. <sco...@ya...>]

 Good to hear this. Can you please share the OpenXPKI configuration to store the CA key on YubiHSM? 
RegardsScott Thomas

    On Monday, 14 June 2021, 01:09:09 pm GMT+5, Martin Bartosch <vc...@cy...> wrote:  
 
 Hi,

> Yubico YubiHSM2 is a FIPS 140-2 Level 3 HSM. It provides PKCS#11 API version 2.40 and full access to device capabilities through Yubico’s YubiHSM Core Libraries (C, Python)
> 
> Does OpenXPKI or CLCA support integration with Yubico YubiHSM 2 for the generation and storage of CA and SubCA keys?

both OpenXPKI and clca can use HSM protected keys via the PKCS#11 API.

Cheers

Martin