Which configuration file and Vault utility are used to migrate the server key to an HSM?
Which configuration file and Vault utility are used to migrate the server key to an HSM?
To migrate the server key to an HSM, the appropriate configuration file and utility used are DBparm.ini and CAVaultManager.exe. DBparm.ini is where the configuration settings for specifying the server key path or HSM storage details are defined. CAVaultManager.exe is the utility used to manage vault server keys, including the migrating process to an HSM.
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PASREF/DBParm.ini.htm?tocpath=Administrator%7CReferences%7CConfiguration%20Files%7CCyberArk%20Vault%20Server%20Parameter%20Files%7C_____1#:~:text=Server%20key%20path%2C%20or%20an%20indication%20that%20the%20key%20is%20stored%20on%20an%20HSM%20device.
It is A.
The answer is A. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.6/en/Content/PASREF/DBParm.ini.htm?tocpath=Administrator%7CReferences%7CConfiguration%20Files%7CCyberArk%20Vault%20Server%20Parameter%20Files%7C_____1
PKCS11ProviderPath and AllowNonStandard FWAddresses need to be updated in the dbparm.ini and then the CAVaultManager utility can be used to load the key onto the HSM. So answer is A. AllowNonStandard FWAddresses