Set up hardware token

hwsetup is a command line tool, included with Nexus OCSP Responder, used to initialize a third party device (that is, a Hardware Security Module HSM) with key pairs and certificates or a secret key.

The utility is located in the /bin directory, relative to the directory where Nexus OCSP Responder is installed.

Run the utility without any arguments to see the full usage.

When creating key pairs or importing certificates, the PKCS#11 library of the device must allow certificate objects to be stored in the same token as the key pairs.

See the following topics for more information:

• Generate DSA/EC/RSA key pair

• List slot contents

• Generate PKCS #10 certificate request

• Install certificate

• Generate AES or 3DES key

• Delete object

• Import a keypair