Create HSM users using AWS CloudHSM Management Utility

Focus mode

Create HSM users using AWS CloudHSM Management Utility - AWS CloudHSM

Use createUser in AWS CloudHSM Management Utility (CMU) to create new users on the hardware security module (HSM). You must log in as a CO to create a user.

To create a new CO user

Use the configure tool to update the CMU configuration.

anchor anchor


$ sudo /opt/cloudhsm/bin/configure --cmu <IP address>

Start CMU.

anchor anchor


$ /opt/cloudhsm/bin/cloudhsm_mgmt_util /opt/cloudhsm/etc/cloudhsm_mgmt_util.cfg

Log in to the HSM as a CO user.
```
aws-cloudhsm > loginHSM CO admin co12345
```
Make sure the number of connections CMU lists match the number of HSMs in the cluster. If not, log out and start over.

Use createUser to create a CO user named example_officer with a password of password1.


aws-cloudhsm > createUser CO example_officer password1

CMU prompts you about the create user operation.


*************************CAUTION********************************
This is a CRITICAL operation, should be done on all nodes in the
cluster. AWS does NOT synchronize these changes automatically with the
nodes on which this operation is not executed or failed, please
ensure this operation is executed on all nodes in the cluster.
****************************************************************

Do you want to continue(y/n)?

Type y.

To create a new CU user

Use the configure tool to update the CMU configuration.

anchor anchor


$ sudo /opt/cloudhsm/bin/configure --cmu <IP address>

Start CMU.

anchor anchor


$ /opt/cloudhsm/bin/cloudhsm_mgmt_util /opt/cloudhsm/etc/cloudhsm_mgmt_util.cfg

Log in to the HSM as a CO user.
```
aws-cloudhsm > loginHSM CO admin co12345
```
Make sure the number of connections CMU lists match the number of HSMs in the cluster. If not, log out and start over.

Use createUser to create a CU user named example_user with a password of password1.


aws-cloudhsm > createUser CU example_user password1

CMU prompts you about the create user operation.


*************************CAUTION********************************
This is a CRITICAL operation, should be done on all nodes in the
cluster. AWS does NOT synchronize these changes automatically with the
nodes on which this operation is not executed or failed, please
ensure this operation is executed on all nodes in the cluster.
****************************************************************

Do you want to continue(y/n)?