Home >

Installation Guide > SafeNet PCI-E HSM Hardware Installation > SafeNet PCI-E HSM Required Items

SafeNet PCI-E HSM Required Items

This section provides a list of the components you should have received with your SafeNet PCI-E HSM order. The list of items you should have received depends on whether you ordered a password-authenticated SafeNet PCI-E HSM or a PED-authenticated SafeNet PCI-E HSM, and whether you order included a backup device, as described in the following sections:

Password-Authenticated SafeNet PCI-E HSM

The following are the standard items that you should have received as your basic order for a password-authenticated SafeNet PCI-E HSM:

SafeNet PCI-E HSM

You order should include one SafeNet PCI-E HSM 7000 or SafeNet PCI-E HSM 1700 HSM. Both HSM models are physically identical.

Anti-Static Wrist Strap

You order should include one anti-static wrist strap.

Software and Documentation

Your order should include a DVD case containing a Software DVD and a Documentation DVD.

PED-Authenticated SafeNet PCI-E HSM

For local-only operation, where you work at the same computer that contains your SafeNet PCI-E HSM, you require at least a single, local-only SafeNet PED2. The standard SafeNet PED 2 is capable of local operation only.

If you intend to use Remote PED functions, you will need a SafeNet PED 2 (capable of remote or local PED operation).

If you intend to backup your SafeNet PCI-E HSM to a Backup HSM, then you require a SafeNet PED2 to connect to that Backup HSM.

If you intend to combine remote operation and backup, then you should have at least one remote-capable SafeNet PED2 (for remote connection to the SafeNet PCI-E HSM). For convenience you might prefer to have a second PED (which can be local-only for the Backup HSM). It is possible to use a single Remote-capable SafeNet PED2 for both connections, and to simply change modes (local or remote mode) as needed.

The following are the items that you receive when you purchase a standard SafeNet PED2 (local-only capable).

Note that you can use SafeNet PEDs and PED Keys that you already own and use with other HSMs – PEDs of the same type and version (v2.3.0 and later) are interchangeable, and PED Keys can be used with multiple HSMs if that is appropriate in your context (the only exception is the SRK, which is specific to a single SafeNet PCI-E HSM). You should purchase the number you need for your own convenient operation, and for backup/standby units as your security policies might require.

SafeNet PED

Your order should include a PED II device. To use SafeNet PCI-E HSM with Remote PED function requires a Remote Capable PED – the standard PED does not have the Remote capability. They appear almost identical except for the words “Remote Capable” on the back, and the availability of the “Remote” menu when powered on.

SafeNet Local PED cable

Your order should include a 9-pin, Micro-D to Micro-D cable for local PED operation.

SafeNet Remote PED cable (Remote PED only)

If you ordered a SafeNet remote PED, your order should include a Type A to Mini B USB cable for remote PED operation.

SafeNet Remote PED Power Supply Kit (Remote PED only)

If you ordered a SafeNet remote PED, your order should include a SafeNet remote PED power supply kit. The power supply is auto-sensing and includes replaceable mains plug modules for international use.

PED Keys and Labels

Your order should include a set of iKey PED Keys and peel-and-stick labels.

Backup Device

You can back up your selected SafeNet PCI-E HSM partition contents (root keys, certificates, other items) to a SafeNet Remote Backup HSM. The SafeNet SafeNet Remote Backup HSM is a backup-storage option, suitable for off-site storage, and for backing up multiple HSM partitions. The Backup HSM can backup contents of Password authenticated or of PED authenticated HSMs. It must be initialized as one or the other type before the backup operation starts.

The SafeNet Remote Backup HSM can be connected directly to an HSM, or it can be connected to a separate computer to backup remotely located HSMs, in conjunction with Remote PED.

The authentication method for external HSMs must match the authentication method for any internally installed HSM with which they are used (password or PED).

SafeNet Remote Backup HSM

You order may include a SafeNet Remote Backup HSM.