Enable the DUS and EWV multi-usage combinations for asymmetric keys
For this step, you must log in with an identity that has a role with the Security:Key Settings permission. You can use the default Administrator role and Admin identities.
The EJBCA application requires asymmetric keys with multiple usages, which you can configure, but the does not enable this by default.
You must enable the following multi-usage combination for all users, including anonymous users, due to how the EJBCA application creates the keys on the HSM:
- DUS (Decrypt, Unwrap, Sign)
- EWV (Encrypt, Wrap, Verify)
Choose one of the following methods to enable DUS and EVW:
Go to the Extended Options menu.
Select Asymmetric Authorize in the Usage drop-down menu, and select [ Add ].
Select the DUS usage combination and select [ OK ].
Repeat the preceding steps to add the EWV multi-usage combination for Asymmetric Authorize.
Now, select Asymmetric Anonymous in the Usage drop-down menu and enable both the DUS and EWV multi-usage combinations.
Select [ Save ] in the lower-right corner of the window to save the changes.