Getting Partition Logs

This page describes how to retrieve the partition logs from an HSM partition.

The partition logs contain the events from the partition to which the client is connected. This is useful in cases where you are not the HSM operator and only have access to a single partition (which is the case in CloudHSM).

Having the partition logs is useful when troubleshooting issues during application integration or application development. The partition logs allow you to see how the HSM sees the API requests that your application is making. This can help narrow down the root cause of an issue.

REST

The partition logs can be retrieved from the REST API through the GET /v1/hsm/log endpoint.

JCE

When using the JCE API, the partition logs can be retrieved as follows (see also these code samples):

import com.securosys.primus.jce.PrimusDevice;
String log = PrimusDevice.getHsmLog();

Primus Tools

The partition logs can also be retrieved using the Primus Tools. Internally, this uses the JCE API.

PKCS#11 (ppin)

When using the PKCS#11 API, the partition log can be retrieved using the ppin tool.

Decanus Partition Administration

Partition Security Officers (PSO) can use the Partition Administration interface on the Decanus Terminal to export the partition logs. For details, see Section 5.3.6 "User Diagnostics" of the Decanus User Guide.