Skip to main content

Variable: SOFTWARE_TOKEN_MANUFACTURERS

const SOFTWARE_TOKEN_MANUFACTURERS: readonly string[]

Defined in: packages/key-custodian/src/policy.ts:79

Token manufacturers known to keep keys in software. Matched as a prefix of the token's manufacturerID or model, because SoftHSM reports SoftHSM project and SoftHSM v2. A software token missing from this list would be classified as hardware, so a new software token used anywhere in the estate is added here first. In production the manufacturer allowlist (assertTokenExpected) is the primary guard and this list the second.