Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »


  • Modified softhsm, TPM plugin and import tool will be pre-installed and come from the base image
  • During the AAF/CM/CA container init, run import.sh and sub scripts to import the CA key to either softhsm or TPM
    • Needs a mount volume to present the formatted keys, srkhandle  for TPM import
    • Needs a mount volume to present the encrypted private key and passphrase for the Softhsm import
  • Create org.osaaf.cm.pkcs11 file under ~/oom/kubernetes/aaf/resources/config/local/
  • Change property file under ~/oom/kubernetes/aaf/resources/config/local/org.osaaf.cm.ca.props to point to .pkcs11 file 
  • During the LocalCA instantiation, path to pkcs11 config file, alias  and the keystore pin is passed in through list of paramas 
    • Using these, LocalCA will add the pkcs11 provider
    • load the pkcs11 keystore
    • get the CA key 
  • No labels