an abbreviation for Hardware Security Module which is a security device that is compliant with PKCS11 standard and which is a secure storage for data specially private keys.
Questions tagged [hsm]
144 questions
0
votes
0 answers
Windows CA with HSM
Having some trouble finding documentation open on the web on this so I’m asking for help here.
When using a HSM (Gemalto G5) for a windows CA is the private key ever exposed to the windows server at any point?
For example if I have a root CA and…
user2782999
- 113
- 2
0
votes
1 answer
Protecting Keys with External Factor
I have some symmetrical encryption keys (DEK) stored in the database alongside with the encrypted data. DEK's are encrypted by the public key of the HSM. The application server uses HSM with PKCS11 interface. The key and data decryption is done…
Tuomas Toivonen
- 371
- 1
- 2
- 10
0
votes
1 answer
IOT secure data transfer
I have a question about a monitoring software architecture.
Think about 50 different locations in different cities. Assume that these locations are small plants.
In every location there are approximately 50 devices which produce small amounts of…
bilgehanuk
- 3
- 2
0
votes
1 answer
Internal storage scheme for storing private keys inside an HSM
I am trying to understand the internal storage scheme used by HSMs to store the private keys. My question is: are keys stored in plaintext inside an HSM? Are there any variations?
Fakhar
- 1
0
votes
0 answers
Affordable web security: sending private key to service over HTTPS vs storing in disk image vs HSM
I'm currently building an application whose only real complexity lies in private key security. I don't feel comfortable keeping the private key in the disk image, from which the server would read it, so I've thought about building a dedicated…
runeks
- 393
- 1
- 2
- 8
0
votes
1 answer
Public Key Encryption vs HSM for storing encryption keys
Let's say I have sensitive data in the database server that needs to be encrypted (i.e emails, etc..) and I want to make sure that in the event that the server is compromised, the attacker shouldn't be able to decrypt these data (at the very least…
redgetan
- 121
- 5
0
votes
1 answer
Securing HSM's Login Keys
I have an PKCS#11 enabled application which interacts with HSM to store TDES keys. The HSM is initialized with the Security Officer (SO) password provided by the user while the application was first installed.
I would like to know how best to…
Prabhu
- 226
- 1
- 6
-1
votes
1 answer
Integrate POS client with HSM Luna
I want to integrate and test a terminal device (PED) with HSM Luna. But I'm not able to understand steps clearly, as to what is done when a new device is integrated. Can anyone please help with this.
Things I know:
Firstly, a BDK is generated. For…
vish4071
- 99
- 1
-1
votes
1 answer
List all keys in Utimaco HSM created by PKCS11 and CNG?
Is there a way to list all keys inside the Utimaco HSM, created by PKCS11 interface and cngtool?
currently, I only can view each of them separately:
PKCS11: using "PKCS#11 CryptoServer Administration" interface.
CNG keys using the command: cngtool…
mshwf
- 147
- 6