Success Story: Painless PKI Migration from legacy HSM to Securosys HSM
Channel: Securosys
Date: 03/02/2021

by Thomas Weber, CEO intelliCard AG

0:00 Introduction Sucess Story: Painless PKI migration from legacy HSM to Securosys HSM
1:01 Reasons to migrate keys to a new HSM vendor
2:20 Options to migrate keys to a new HSM vendor
3:22 PKI migration- Effected entity type
7:25 Option 1: Migration PKI phase 1- Prepare the infrastructure
11: 00 Option 1: Migration PKI phase 2- Switch to the new PKI
13:05 Option 1: Migration PKI phase 2 - Automatic renewing scenarios 
17:44 Option 1: Migration PKI phase 3 - Phase out the old PKI 
20:55 Option 2: Key import/export
22:48 Requirements for key migration (HSM, Auditor) 
25:12 Vendor requirements 
26:07 Migration scenarios
26:37 Scenario1: Key wrapping with all key stored on the HSM (8 steps) 
28:03 Scenario 2: Key wrapping with a clear-text AES key 
28:23 Scenario 3: Key exported to PKCS#12
30:40 Migration tool
31:02 Issues with key export and import