Controlled use of a hardware security module

A system for using a hardware security module connectable to multiple computer systems, the multiple computer systems being connectable to a server within a common network, and the system comprising:

• a memory;
• and
• a processing device communicatively coupled to the memory, wherein the system performs a method comprising:
• providing a network address of the server in persistent memory of the hardware security module;
• providing an encrypted secret entity in the persistent memory of the hardware security module;
• providing a private key in the persistent memory of the hardware security module;
• based on the hardware security module being connected to one computer system of the multiple computer systems, the method comprising:
• establishing a secure connection between the hardware security module and the server;
• retrieving, via the secure connection, a wrapping key from the server and storing it in volatile memory of the hardware security module;
• and
• decrypting the encrypted secret entity with the wrapping key and storing the decrypted secret entity in the volatile memory of the hardware security module.

A computer program product for using a hardware security module connectable to multiple computer systems, the multiple computer systems being connectable to a server within a common network, the computer program product comprising:

• a computer readable storage medium having computer readable instructions embodied therewith, the computer readable instructions being executable to perform a method comprising:
• providing a network address of the server in persistent memory of the hardware security module;
• providing an encrypted secret entity in the persistent memory of the hardware security module;
• providing a private key in the persistent memory of the hardware security module;
• based on the hardware security module being connected to one computer system of the multiple computer systems, the method comprising:
• establishing a secure connection between the hardware security module and the server;
• retrieving, via the secure connection, a wrapping key from the server and storing it in volatile memory of the hardware security module;
• and
• decrypting the encrypted secret entity with the wrapping key and storing the decrypted secret entity in the volatile memory of the hardware security module.