Skip to content

Commit c41b829

Browse files
authored
Merge pull request #104443 from johncdawson/patch-5
Update tutorial-deploy-hsm-powershell.md
2 parents 4cfbf2b + 4efd2bf commit c41b829

File tree

1 file changed

+9
-8
lines changed

1 file changed

+9
-8
lines changed

articles/dedicated-hsm/tutorial-deploy-hsm-powershell.md

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -241,18 +241,19 @@ At this point, you have allocated all resources for a highly available, two HSM
241241

242242
## Delete or clean up resources
243243

244-
If you have finished with just the HSM device, then it can be deleted as a resource and returned to the free pool. The obvious concern when doing this is any sensitive customer data that is on the device. To remove sensitive customer data the device should be factory reset using the Gemalto client. Refer to the Gemalto administrators guide for the SafeNet Network Luna 7 device and consider the following commands in order.
245-
246-
1. `hsm factoryReset -f`
247-
2. `sysconf config factoryReset -f -service all`
248-
3. `my file clear -f`
249-
4. `my public-key clear -f`
250-
5. `syslog rotate`
251-
244+
If you have finished with just the HSM device, then it can be deleted as a resource and returned to the free pool. The obvious concern when doing this is any sensitive customer data that is on the device. The best way to "zeroize" a device is to get the HSM admin password wrong 3 times (note: this is not appliance admin, it's the actual HSM admin). As a safety measure to protect key material, the device cannot be deleted as an Azure resource until it is in the zeroized state.
252245

253246
> [!NOTE]
254247
> if you have issue with any Gemalto device configuration you should contact [Gemalto customer support](https://safenet.gemalto.com/technical-support/).
255248
249+
If you want to remove just the HSM resource in Azure you can use the following command replacing the "$" variables with your unique parameters:
250+
251+
```powershel
252+
253+
Remove-AzureRmResource -Resourceid ` /subscriptions/$subId/resourceGroups/$resourceGroupName/providers/Microsoft.HardwareSecurityModules/dedicatedHSMs/$resourceName
254+
255+
```
256+
256257
If you have finished with resources in this resource group, then you can remove them all with the following command:
257258

258259
```powershell

0 commit comments

Comments
 (0)