About the SafeNet PED

Home >	Administration Guide > PED (Trusted Path) Authentication > About the Luna PED

About the SafeNet PED

SafeNet PED is a PIN Entry Device, where PIN stands for Personal Identification Number. The PED works in conjunction with HSMs and backup tokens from SafeNet. It provides PIN entry to SafeNet HSMs and to backup tokens via a secure data port, as part of FIPS 140-2 level 3 security (the Trusted Path). PED 2.x is the current generation. A migration path is available if you have the legacy SafeNet PED 1.x - contact Gemalto Technical Support.

The PED is shipped separately from your HSM product, because one PED can be used with any Trusted Path HSM. A PED with firmware version of 2.0 or later is also RoHS-compliant. The version is displayed on the PED display panel, each time the PED is powered on.

As well, you require a set of at least three PED Keys. For PED 2.0 and later, the PED Keys are in the form of hardware identification tokens, SafeNet iKey model 1000 (RoHS-compliant) or possibly other SafeNet iKey models, to be introduced at a later date. For most applications, you would want an additional set to make duplicates for backup purposes (and, optionally, several more PED Keys, if you intend to use the MofN authentication option with a SafeNet HSM product that supports MofN).

PED Features

The figure below shows a front view of the PED, with some important features indicated.

1.On the lower front face is the keypad for command and data entry.

2.On the upper front face is the 8-line liquid crystal display (LCD).

3.At the top on the far left is a DC power-adapter connector (not used when PED is connected directly to an HSM - local PED).

4.At the top, second from the left is a USB mini-B connector, reserved for file transfer to/from the PED.

5.At the top in the middle is a micro-D subminiature (MDSM) connector for the cable to the HSM (data and power).

6.At the top, on the far right, is the USB A-type connector for iKey-style PED Keys.

7.Also shown is an iKey PED Key, for insertion in the PED Key connector, and described in these pages.

The visible difference between the standard (local-only) PED 2 and the Remote Capable PED 2 is a sticker on the upper right-front panel, either local or remote .