Nitrokey HSM - create-dkek-share with threshold scheme not prompting for password

Nitrokeys Misc
1

Hello,
I used this command to create a DKEK share protected with n-of-m threshold scheme:

$ sc-hsm-tool --create-dkek-share dkek-share.pbe --pwd-shares-threshold 2 --pwd-shares-total 3

The command generates a Prime and a sequence of randomly generated Share values which I assume will be used as passwords/PINs by the key custodians for importing into the HSM.

Is there a way to make the tool let the user choose their own PIN/password as share value instead?

2

The shares are not PINs but values used for Shamir’s Secret Sharing (SSS) algorithm. Therefore they can’t be chosen freely but are generated by the SSS algorithm.