Home >

HSM Access Provider Installation Guide > Windows Installation for PCI Mode

  
Windows Installation for PCIe Mode

This chapter provides instructions for Windows operating systems only. See Linux Installation for PCIe Mode for Linux operating systems. The latest versions of the client software and HSM firmware can be found on the Gemalto eService Support Portal at https://serviceportal.safenet-inc.com.

Before following the procedure below, ensure that you are logged in as a member of the Windows administrator group.

Upgrading

If you are upgrading the access provider, you must uninstall any currently-installed version by using the Windows Programs and Features control panel.

CAUTION:  If uninstallation is not carried out first, the system may lock up. See Troubleshooting for recovery instructions.

To install the SafeNet PCIe HSM Access Provider:

1.Locate the installer directory and execute the file PTKpcihsm2.msi.

2.Work through the installation wizard.

By default, the SafeNet PCIe HSM AccessProvider package is installed in the following directory:

\Program Files\SafeNet\Protect Toolkit 5\PCI HSM 2

3.A prompt during the installation allows you to change the default destination. Unless there is good reason, the default should be accepted.

4.You will be prompted to install the driver. The driver is required.

Note:  A reboot may be required to successfully load the driver.

To verify correct installation:

From a command prompt, type hsmstate to execute the hsmstate utility. If the adapter has been correctly installed, the response will include:

HSM in NORMAL MODE. RESPONDING

For more information about the hsmstate utility, refer to the section in Utilities Command Reference.

Making Configuration Changes

Finally, make any necessary configuration changes. Currently, the only configurable setting in PCIe mode is the ET_HSM_PCICLIENT_READ_TIMEOUT_SECS variable. This setting determines the time in seconds the PCIe driver will wait before timing out on a read operation. It should be set long enough to avoid an unintentional timeout, which causes the driver to shut down the HSM. See Configuration Items for instructions on how to change this setting, and PCI Mode Client Configuration Items for a description of the variable.