HSM migration

In the course of upgrading OneSpan Authentication Server, it is possible to migrate from an SSM to an HSM installation, and to migrate encrypted keys to the HSM. The Configuration Wizard contains the HSM Migration page with options to specify whether an HSM is to be used, as well as the HSM type.

If migration of the HSM is selected, the pages to configure the HSM library and keys will be displayed. Once the connection to the HSM library is established, the keys can be configured in OneSpan Authentication Server. To effectively migrate to HSM, start rotation from SSM to HSM keys in the OneSpan Authentication Server Administration Web Interface. Only when the rotation is finished, will the migration from SSM to HSM be completed.

For more information, refer to the OneSpan Authentication Server Installation Guide for Linux or the OneSpan Authentication Server Installation Guide for Windows (as applicable), Section "Configuring OneSpan Authentication Server (Upgrade)".

Migrating to an HSM installation is only possible if an SSM has been configured.