an abbreviation for Hardware Security Module which is a security device that is compliant with PKCS11 standard and which is a secure storage for data specially private keys.

learn more… | top users | synonyms

2
votes
0answers
138 views

Nginx and HSM integration to hold private keys

We are using Nginx and storing private keys in file on server. We would like to move private keys to HSM, so that ssl keys are stored in HSM and never leaves HSM. All crypto operations required during ...
2
votes
0answers
131 views

What is the purpose of “Variant” LMKs?

What is the purpose of "Variant" LMKs? The JPOS project (http://jpos.org/wiki/HSM_basics) gives this description: To make things more secure HSM's use variants. A variant is a hex value for ...
2
votes
0answers
305 views

Thales HSM LMK keypairs: 00-01, 02-03, 08-09, 10-11, 12-13

In the Thales HSM documentation, 40 LMK keypairs are listed but the following keypairs are not shown in the keytype table: 00-01 02-03 08-09 10-11 12-13 Am I correct in thinking that the ...
1
vote
0answers
78 views

Through signing process with HSM Luna, What device perform the signing?

I'v succesfully configure and test character String signin usign Java and HSM Luna SA through PKCS11. My question is, In wich processor cryptographic operations are perform? In wich way HSM Luna ...
1
vote
0answers
374 views

Import securely RSA private key through PKCS#11

I have a cryptographic device that supports the following mechanisms: How I could securely import RSA private key into it? Because there is no support for wrap/unwrap using symmetric key is there ...
1
vote
0answers
768 views

Decrypt “key” that is encrypted with LMK or TMK

New to HSM (Thales payshield 9000), I'm working on DUKPT algorithm. I manage to derive the IPEK(encrypted either under LMK or TMK), but I need to inject a plain text IPEK into an end point device. I ...
0
votes
0answers
26 views

Secure HSM connectivity, direct or LAN?

What would be considered a better and secure setup for HSM: A direct connection to the server (point-to-point) Having it in the LAN and configuring VLAN?
0
votes
0answers
13 views

Online Personalisation of Terminal-HSM key management

In Germany, there is a widely used key management called Online Personalisation of Terminal-HSM (OPT, Online-Personalisierung von Terminal-HSM). I would like to get details about it and to compare it ...