3.7. Security Modules

Starting with version 2.5 LinOTP supports different security modules.

The security module specifies how the encryption of the HMAC keys and password is handled in LinOTP.

The default behaviour having 3 AES encryption keys in a file /etc/linotp2/encKey is also seen as a security module.

• 3.7.1. Defining Security Modules
• 3.7.2. Defining SafeNet LunaSA
  • Partition Password
• 3.7.3. Setting up SafeNet LunaSA
  • Requirements
  • Network settings
  • LunaSA server certificate
  • Initialization of HSM
    • Create HSM Admin PED Key
    • Create Domain PED Key
    • HSM security polices
    • Create HSM Partitions
    • Partition policies
    • Activate Partitions
  • Setting up HSM clients and assigning clients to HSM partitions
  • Troubleshooting
• 3.7.4. Create AES Keys
• 3.7.5. Backup and restore with LunaSA
  • Backup
  • Restore
• 3.7.6. Setting up HA and Load balancing for LunaSA
  • Register LinOTP
  • Creating HA group
  • Monitoring
    • Restore an HA group
• 3.7.7. Managing Passwords with LunaSA
  • Changing admin Password
  • Changing HSM PED Password
  • Changing Partition Passwords
  • Resetting Partition Passwords