Content based hardware security module assignment to virtual machines

An assignment system to assign at least one hardware security module out of a plurality of hardware security modules to a guest system, said assignment system comprising:

• at least one hardware security module out of said plurality of hardware security modules comprising a memory adapted to store a master key;
• a determination unit as part of said guest system, said determination unit adapted to generate a positive outcome based on a data pattern for a challenge protocol adapted to prove that said at least one hardware security module out of said plurality of hardware security modules is configured with said master key;
• and
• an assigning unit adapted to assign said at least one hardware security module out of said plurality of hardware security modules configured with said master key to said guest system based on a positive outcome of said challenge protocol.

A computer program product for assigning at least one hardware security module out of a plurality of hardware security modules to a guest system, said computer program product comprising:

• a computer readable storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
• configuring said at least one hardware security module out of said plurality of hardware security modules with a master key;
• using a data pattern for a challenge protocol adapted to prove that said at least one hardware security module out of said plurality of hardware security modules is configured with said master key;
• and
• assigning said at least one hardware security module out of said plurality of hardware security modules configured with said master key to said guest system based on a positive outcome of said challenge protocol.