Azure Key Vault Step 3.2 for Thales HSM security world initialization uses deprecated cipher suite
In this document:
The step 3.2 suggests you should initialize your security world with:
new-world.exe --initialize --cipher-suite=DLf1024s160mRijndael --module=1 --acs-quorum=2/3
DLf1024s160mRijndael is the Thales nShield HSM legacy cipher suite, and should not be used in Production environments. The cipher suite should be DLf3072s256mRijndael so the command should be:
new-world.exe --initialize --cipher-suite=DLf3072s256mRijndael --module=1 --acs-quorum=2/3
I suggest updating the step to reflect the newer cipher suite.
3
votes
Dave Shaw
shared this idea