Why It Is Not Possible to Generate Security Server Authentication Key on HSM?

Owned by Petteri Kivimäki
Jan 16, 2019
1 min read

Problem

Why it is not possible to generate Security Server authentication key on HSM?

Solution

The authentication key is used in TLS which means that Java TLS implementation (JSSE) must be able to use it. It should be possible to use a HSM keystore with JSSE, but support for that has not been implemented or tested. More information at https://docs.oracle.com/javase/8/docs/technotes/guides/security/p11guide.html.