|
Home > |
|---|
The small form factor (SFF) backup feature is available for PED-authenticated or password-authenticated Luna HSMs. Small form factor backup is mediated by Luna PED and uses SafeNet eToken 7300 USB devices as the repository for archived cryptographic objects.
The eToken 7300 is Common Criteria validated and tamper-evident.
SFF backup is supported for Luna SA, Luna PCI-E, or Luna G5.
One eToken 7300 can back up one HSM partition.
Backup and restore can be performed to or from an eToken 7300 inserted into a locally-connected or remotely-connected (via PedServer) Luna PED.
Note: Using SFF backup imposes some constraints, and affects other features like HA. See "Cloning and SFF Backup Option Use Cases" for more detailed information.
SFF backup requires:
•Luna Software version 5.4.0 or newer
•HSM firmware version 6.21.0 or newer
•Luna PED firmware version 2.6.0-6 or newer
•Source Luna HSM must be cloning type, only - not applicable to Key Export (KE) HSMs
•Backup to a remotely located SFF backup requires Remote PED - a local-only PED is not field-upgradable to remote capability
•HSM must have the SFF backup capability update applied (this is a purchased option)
CAUTION: The SFF backup capability update is a destructive change to your HSM, meaning that the upgrade enforces HSM initialization and all contents will be lost. Back up any important keys or objects before the upgrade. You can recreate your partition(s) and restore your objects after the HSM has been re-initialized, following the application of the SFF backup capability upgrade.