OFFBOARD KEY STORAGE Menu Functions
The OFFBOARD KEY STORAGE menu provides the following functions:
| # | Function | Description | 
|---|---|---|
| (101) | Extract Masked Object | Extracts a key off the Luna Network HSM in a masked format, into a file masked.key. You can rename the resulting file if you are testing with multiple extractions. | 
| (102) | Insert Masked Object | Inserts an extracted, masked blob (file) back onto the Luna Network HSM. You are prompted for the name of the file, which must have been extracted from a Luna Network HSM using the same masking key (i.e., the same Luna Network HSM or a clone of it). | 
| (103) | Multisign With Value | Performs the multisign function, after prompting you for the mechanism to use, the number of datablobs to be signed (limited to 5 for this demonstration command), and the data or filenames to be signed. | 
| (104) | Clone Object | (Reserved for Thales use) Copies an object from the Luna Network HSM to another HSM. | 
| (105) | SIMExtract | This function takes a list of object handles, extracts them using the given authorization data for protection, and returns the extracted set of objects as a single data blob. The objects can be left on the partition or destroyed, depending on the value of the delete-after-extract flag. | 
| (106) | SIMInsert | This function inserts the objects contained in a previously extracted blob into the HSM, and returns the list of handles assigned to the objects. | 
| (107) | SimMultiSign | This function uses the key material in a previously extracted key blob to sign pieces of data in the input data table, returning the signatures through the signature table. The key blob must contain a single key, otherwise an error is returned. | 
| (118) | Extract Object | Extracts a key off the Luna Network HSM into a file. | 
| (119) | Insert Object | Inserts an extracted blob (file) back onto the Luna Network HSM. | 
