Cakewalk Music Creator 4 How To Tailor Your

However, you can use the method here to test your service scenario.

Youll need to know the Secure Boot Public Key Infrastructure (PKI).

Requirements Tools Needed mksindustrial.cl Available Inbox mksindustrial.cl Available Inbox mksindustrial.cl Available in the latest Windows SDK Hardware Security Module (HSM) The whitepaper demonstrates the key generation using examples from the nCipher (now Thales) PCI HSM model nCPnCPnCP and the SafeNet Luna HSMs.

Most of the concepts apply to other HSM vendors as well.

Cakewalk Music Creator 4 How To Tailor Your

For other HSMs, contact your manufacturer for additional instructions on how to tailor your approach with the HSM Cryptographic Service Provider (CSP).

Approach We use the Microsoft certificate creation tool: mksindustrial.cl to generate the Secure Boot Platform Key (PK) and other keys needed for Secure Boot.

The certreq tool can be adapted to use an HSM by providing the Cryptographic Service Provider (CSP) to be the HSM.

Find the Cryptographic Service Provider (CSP) You can use either the mksindustrial.cl tool or a tool used by the HSM to list the CSPs.

This example uses the certutil tool to show the CSPs on the ThalesnCipher HSM: For the SHA digesting algorithm, use the CNG provider.

This example uses the built-in ThalesnCipher tool to list the CSP: For the SHA digesting algorithm, use the CNG provider.

This example uses the SafeNet Luna HSMs tool to list the CSP: For SHA digest algorithm you will need to use a CNG provider SafeNet Key Storage Provider.

To generate the key: Sample mksindustrial.cl file: Update the following values: Subject: Replace the TODOs with real data.

ValidityPeriod, ValidityPeriodUnits: Use the validity period of 6 years.

While a PK may only be valid for 2 years, the 6-year period allows for potential future servicing.

You may be asked to provide the tokens that you have used to create the Security World for the Thales HSM.

Validating certificate (self-signed) Verify that the certificate has been generated correctly: For example: Sample output: Backing up the certificate Back up your certificates.

This way, if either the certificate store or the server goes down, you can add the certificate back to the store.

For more info on mksindustrial.cl, see Advanced Certificate Enrollment and Management: Appendix 3: mksindustrial.cl Syntax Note, the PK is a self-signed certificate, and is also used to sign the KEK.

Please talk to your Microsoft contact to get these scripts.

Used by the signtool to sign the PK comes later in the servicing case..

Since we are dealing with the HSM case, the following line applies in the script applies.

Signing with PK certificate (servicing scenario) This section applies to signing with your PK certificate and may not be applicable for initial provisioning of system.

Cakewalk Music Creator 4 Serial Number