HSM Support

Overview

The Certificate System supports hardware security modules (HSMs) and crypto accelerators provided by third-party vendors of PKCS #11-compliant tokens.

The server can be configured to use different PKCS #11 modules to generate and store key pairs (and certificates) for all Certificate System subsystems ‐ CA, KRA, OCSP, TKS, and TPS. PKCS #11 hardware devices also provide key backup and recovery features for the information stored on the hardware token. Refer to the PKCS #11 vendor documentation for information on retrieving keys from the tokens.

Installation Guide

• Installing CA with HSM

• Installing CA Clone with HSM

• Installing CA with Existing Keys in HSM

• Installing KRA with HSM

• Installing KRA Clone with HSM

• Installing OCSP with HSM

• Installing OCSP Clone with HSM

• Installing TKS with HSM

• Installing TPS with HSM

User Guide

• Configuring HSM Connection

See Also

• HSM

• SoftHSM

• Entrust nShield Docs