68 DataPower SOA Appliance Service Planning, Implementation, and Best Practices
Each HSM has a special key inside of it, the key wrapping key, which is used to
encrypt exported private keys and to decrypt imported private keys. If the goal is
to restore exported keys to the same appliance, most of what is described in this
section is not required (hsm-clone-kwk, red keys, or the hsm-domain parameter).
This is because the key wrapping key at import time will already match the key
wrapping key at export time because the HSM device is the same. However, if
the goal is to move exported keys from one appliance to another one, you must
follow all of the steps in this section.
The requirements are:
First, the two HSMs in question must both be initialized ...