Nitrokey HSM firmware update

Nitrokeys
1

I have loose the PIN and SO-PIN of a HSM2 USB module.
This post explain how to do a firmware update:
https://support.nitrokey.com/t/nitrokey-hsm-firmware-update-failed/6059

But I got the following error:
SmartCard-HSM contains keys. Please remove keys first

The SOPIN is not blocked.
I read in:
https://support.nitrokey.com/t/initialize-nitrokey-hsm-device-blocked/1895/15

There is no way to brick the device. You can always perform a firmware update if one of the following conditions is meet

The device does not contain any keys
The SO-PIN is blocked

Condition 1 is for normal use: We just want to make sure, that users do not accidentally destroy keys.
Condition 2 is for customers with a blocked SO-PIN, so they do not end up with a bricked device. That is however limited to 5 firmware updates.

Does I need to block the SOPIN (The PIN is already bloqued) to get rid of this error?

2

Yes, a blocked SO-PIN is required, if the device still contains keys. Thereby you confirm, that you no longer need the key material. It will be removed during the firmware reload.

3

Thanks for your answer. It was looking weird at first read but it make sense…