Management Features & Benefits

Graphical User Interface (GUI)

Easy to use GUI based interface eases HSM device administration and PKCS#11-based key management using intuitive navigation and user interaction.

The use of Java based GUI technology provides a consistent look and feel across all supported operating platform environments.

Command Line Interface

Easy script-based integration into automated systems administration facilities is enabled by the inclusion of a Command Line Interface.

Provision for in-field secure firmware upgrade

Upgrades can be cost efficiently performed at the in-field location avoiding the need and cost to return the HSM to the service location, or open or disassemble the unit.

Additionally, internal certificate-based security mechanisms ensure that only authentic, digitally signed software from SafeNet Inc. can be installed, eliminating the possibility of non-proprietary software being purposely loaded to downgrade the security of the device.

Direct connection of smart card reader and PIN pad to cryptographic hardware

The storage of cryptographic keys on a smart card through the direct connection of a smart card reader facilitates rapid configuration of identically-keyed HSMs whilst also minimizing the possibilities of human error. Additionally, the storage of keys on Smart Cards delivers secure key back up in case of tamper activated memory erasure, firmware upgrade, maintenance, or key transfer from one HSM to another.

Secure PIN pad entry devices can also be connected directly to the HSM for direct entry of PINs and key components. This eliminates insecure data entry paths via external operating system processes and memory.

Remote Management (Device and Key Management) on network HSMs

Convenient, non-local, remote network access to the HSM reduces administrative costs and time by enabling device administration and key management operations to be remotely performed on network based HSMs. Remote key management by PKCS#11 security officers is supported using the ProtectToolkit C Remote Client software and GUI-based Key Management tools installed on the host systems utilizing the ProtectServer External HSM. The use of Java based GUI technology provides a consistent look and feel across all supported operating platform environments.