I have created product feature some time back ( https://jira.hyperledger.org/browse/FAB-16102 ), currently it resides in Backlog. You can probably up vote it :) . Thanks.

#hsm #raft

Done :) Though I don't expect it to be solved anytime soon :( Thanks anyway, glad to see I'm not the only one in need of this

#hsm #raft

Hi all, I've been trying to plug fabric to an HSM to avoid having the private keys stored in the file system of the components (except the TLS ones since it is currently not possible to do the same fo

#hsm #fabric-sdk-node #fabric

The peer CLI currently uses the same config as the peer. If you point the peer CLI at a core.yaml file which uses PKCS11 for the BCCSP (same as you would do for the peer), then things should work. If

#hsm #fabric-sdk-node #fabric

Thank you Gari for your quick reply. So from what I understand, since I created my admin user using the fabric-ca-client plugged to the HSM. If I configure the peer CLI command so that it uses the sam

#hsm #fabric-sdk-node #fabric

The Node, Java and Go SDKs all have the ability to use HSMs. The Go SDK uses a similar config to the peer as it basically embeds the bccsp code. The Node SDK allows you to pass in a PKCS11 crypto suit

#hsm #fabric-sdk-node #fabric

Hello, I am trying to integrate our HSM with the Fabric CA, but I can't seem to make it work. I am following the configuration I found in several places, including in the HSM documentation, the HSM co

#fabric-ca #hsm

Try setting default to “pkcs11” rather than “PKCS11” Gari Singh garis@... 978-846-7499

#fabric-ca #hsm

Hi florian, What version of fabric-ca source code are you using? From the following line in the error message you pasted, it indicates that pkcs11 was not actualy enabled when fabric-ca-server was bui

#fabric-ca #hsm

Is it planned in some future release to fix this (2.x.x)?

#hsm #raft

You can't use HSM to store TLS keys. From: "Jean-Gaël Dominé" <jgdomine@...> To: fabric@... Date: 12/06/2019 03:55 PM Subject: [EXTERNAL] [Hyperledger Fabric] #hsm #raft Raf

#hsm #raft

Hi everyone, I'm currently trying to set up a network using Raft and HSM. Before adding HSM, everything was correctly working. But when adding HSM, the private keys are not mounted on the containers a

#hsm #raft

Thanks for the feedback. But why is that? Technical limit? Something not implemented yet? Because from what I understood, the private keys should not be directly on the component's file system and tha

#hsm #raft

It was not implemented From: "Jean-Gaël Dominé" <jgdomine@...> To: fabric@... Date: 12/06/2019 08:53 PM Subject: [EXTERNAL] Re: [Hyperledger Fabric] #hsm #raft Raft and HSM

#hsm #raft

Hi everyone, I have created a softhsm enabled fabric network. Now that I DON'T have the admin-cert and admin-private-key in a file, how can I connect with the network from a dlt-adapter without them o

#fabric-questions #hsm #fabric-ca

Hi Shantanu, You can go through the documentation to understand the flow: https://hyperledger-fabric.readthedocs.io/en/release-2.2/hsm.html#using-a-hardware-security-module-hsm If you use Fabric CA yo

#hsm

Hello Team, I am trying to set up a network with 3 orderers 2 peers and one CA with HSM support(softHSM). I have successfully set up CA with softHSM and can register and enroll with this. I am trying

#hsm

Hi Team, We are trying to configure pkcs11 HSM key with fabric-ca client but getting following error. "Error: Failed to get BCCSP with opts: Could not find BCCSP, no 'pkcs11' provider" We have execute

#hsm #fabric-ca #fabric

With bccsp, you cannot used environment variable overrides unless you actually have the keys/fields defined in the configuration file (fabric-ca-server-config.yaml). The default fabric-ca-server-confi

#hsm #fabric-ca #fabric

Have you updated the fabric-ca config file to also include the config block for PKCS11? In order for you to be able to over a config property with an environment variable, the keys have to at least ex

#hsm #fabric-ca #fabric