Is there any specific authorization that is required for NG decrypting command on Thales HSM 8000 module even after HSM module is authorized?

Question

Please let me know if there is any solution in case the below mentioned error is received on HSM 8000. The HSM is already authorized on which the command is being tried. The command is taken from the manual of HSM 9000; NG command for decrypting the offset previously encrypted using BA command:

Error Code 17 - HSM not authorized, or operation prohibited by security settings

I was expecting the original PIN to be returned by decrypting the offset.

score 0 · Answer 1 · answered Jan 20 '23 at 16:05

0

The command is available only if selected during configuration by enabling the setting "Select clear PINs?" (CS Console command) or "Enable clear PINs?" (HSM Manager Initial Settings).

answered Jan 20 '23 at 16:05

jiarong

229
1
2
5

Thank you for answering. If I understood correctly, does it mean that when HSM is being authorized, then at that time, this particular setting needs to be enabled to run this command? – Muhammad Qaddes Asim Farooqui Jan 23 '23 at 05:04

Is there any specific authorization that is required for NG decrypting command on Thales HSM 8000 module even after HSM module is authorized?

1 Answers1