YubiHSM 2 Usage Guides

These platforms and protocols require additional or specific configuration.

• Deploy for OpenSSH Certificates for Host Login
  • Traditional Method
  • OpenSSH CA
  • OpenSSH Certificates with YubiHSM 2
  • SSH Certificate Request
  • Signing an SSH Certificate Request
• Deploy for OpenSC pkcs11-tool
  • Creating Digital Signatures
  • Performing Decryption
• Deploy for OpenSSL with libp11
  • Signing and Verifying
  • Encrypting and Decrypting
• Deploy for OpenSSL with engine_pkcs11 and yubihsm_pkcs11
  • Creating an Alias
  • Generating a Key in the Device
  • Certificate Request
  • Retrieve 64 Bytes of Data
  • Adding req entries
  • Requesting certificate existing RSA key
  • Self-Signed Certificate Existing RSA Key
  • s_server with RSA Key and Certificate
  • s_server with ECDSA Key and Certificate
• Deploy for Signing Java Code
  • Prerequisites
  • Basic Configuration of YubiHSM 2
  • Configuration File for YubiHSM 2 PKCS #11
  • Configuration File of Sun JCE PKCS #11 Provider with YubiHSM 2
  • Environment Variables
  • Java Keystore
  • Linux Bash Script for Generating Keys and Certificates
  • List the Objects on YubiHSM 2
  • Using YubiHSM 2 with Java Signing Applications
  • Signing XML files using YubiHSM 2
  • Java code using YubiHSM 2
• Deploy for OpenSSL on Windows
  • Overview
  • Installation
• Deploy for Active Directory Certificate Services CA
  • Prerequisites and Preparations
  • Deploying YubiHSM2 with ADCS Overview
  • Configuring the Windows Registry
  • Setting Up Your Enterprise Certificate Authority
  • Alternative ADCS Configuration with YubiHSM 2
• Deploy for Microsoft Host Guardian Service (HGS)
  • The Host Guardian Service – Guarded Fabric Concept
  • HGS Key Protection Service
  • Scope of this Guide
  • Prerequisites and Preparations
  • Basic Setup of YubiHSM 2 and Host Guardian Service
  • Create Signing and Encryption Keys for HGS
• Deploy for Microsoft SQL Server
  • YubiHSM 2 for Microsoft SQL Server Guide
  • Introduction to Always Encrypted
  • Prerequisites and Preparations
  • Basic Setup of YubiHSM 2 and SQL Server
  • Use SSMS to Generate the CMK and CEK
  • Validate Generation of the CMK
  • Use PowerShell Script to Generate the CMK and CEK
  • Encrypt Database Columns
  • Configure SSMS for Database Encryption
• Deploy for EJBCA
  • Prerequisites
  • Configuring a New EJBCA Installation
  • Configuring an Existing EJBCA Installation