Skip to main content

Interface: ExpectedToken

Defined in: packages/key-custodian/src/policy.ts:100

The token a deployment says it procured, from keyCustodian.pkcs11. Each field that is set must equal what the token reports, padding ignored. Production must set the manufacturer or the model (see requiresExpectedToken); elsewhere all three are optional.

Extended by​

Properties​

expectedManufacturer?​

readonly optional expectedManufacturer?: string

Defined in: packages/key-custodian/src/policy.ts:102

CK_TOKEN_INFO.manufacturerID the token must report, such as Thales.

expectedModel?​

readonly optional expectedModel?: string

Defined in: packages/key-custodian/src/policy.ts:104

CK_TOKEN_INFO.model the token must report.

expectedSerial?​

readonly optional expectedSerial?: string

Defined in: packages/key-custodian/src/policy.ts:109

CK_TOKEN_INFO.serialNumber the token must report. Handles address a token by label, and two tokens can share a label; the serial pins the one the handles were minted on.