ProtectServer 3 HSM and ProtectToolkit 7
You are viewing the latest version of the ProtectServer 3 HSM and ProtectToolkit 7 product documentation, which covers all ProtectServer 3 HSM firmware versions and ProtectToolkit 7 client versions released to date, and is updated frequently with the latest corrections and improvements. Archived ProtectServer 2 HSM and ProtectToolkit 5 documentation sets are available in ProtectServer 2 HSM and ProtectToolkit 5.
Customer release notes
The Customer release notes (CRN) provide release-specific details of capabilities, limitations, and known/resolved issues. The CRN is organized by client software, firmware, and appliance software version for the convenience of customers using any released version. The sections below list the latest released components that can be used to operate the ProtectServer 3 HSM and the current FIPS validation status of the ProtectServer 3 HSM Firmware.
Note
The ProtectServer 3 HSM transitioned from FIPS 140-2 Level 3 to FIPS 140-3 Level 3 compliance and validation with the release of ProtectServer 3 HSM Firmware 7.03.01 (validation pending). The information in this section is grouped by the FIPS compliance and validation requirements that are relevant to your ProtectServer 3 HSM deployment.
Latest released components
This section lists the latest released components for the ProtectServer 3 HSM.
The table below lists the latest configuration of ProtectServer 3 HSM components that is compliant with FIPS 140-2 Level 3.
| Component version | Release date |
|---|---|
| ProtectToolkit 7.2.3 | December 2023 |
| ProtectServer 3 HSM Firmware 7.02.04 | March 2024 |
| ProtectServer 3 Network HSM Appliance Software 7.2.4 | March 2024 |
The table below lists the latest configuration of ProtectServer 3 HSM components that is compliant with FIPS 140-3 Level 3.
| Component version | Release date |
|---|---|
| ProtectToolkit 7.3.0 | July 2023 |
| ProtectToolkit 7.3.1 | July 2024 |
| ProtectServer 3 HSM Firmware 7.03.00 (validation pending) | July 2023 |
| ProtectServer 3 HSM Firmware 7.03.01 (validation pending) | July 2024 |
| ProtectServer 3 Network HSM Appliance Software 7.3.0 | July 2023 |
| ProtectServer 3 Network HSM Appliance Software 7.3.1 | July 2024 |
Firmware FIPS validation status
The information below lists the current FIPS validation status of the ProtectServer 3 HSM Firmware.
The following status is relevant to ProtectServer 3 HSM deployments that require FIPS 140-2 Level 3-validated firmware:
Validation completed: ProtectServer 3 HSM Firmware 7.02.04
Validation pending: None
The following status is relevant to ProtectServer 3 HSM deployments that require FIPS 140-3 Level 3-validated firmware:
Validation completed: None
Validation pending: ProtectServer 3 HSM Firmware 7.03.01
For a complete list of supported ProtectServer 3 HSM Firmware versions and their FIPS validation status, refer to Supported ProtectServer 3 HSM firmware and boot loader versions.
Product documentation
The ProtectServer 3 HSM documentation, linked below, is provided in HTML format.
| Section | Purpose |
|---|---|
| ProtectServer 3 HSM and ProtectToolkit 7 installation and configuration | Describes how to install and configure your ProtectServer 3 HSM and the ProtectToolkit 7 client software. |
| PSESH command reference | Describes how to access and use the PSESH command shell and provides detailed syntax descriptions for each available command. |
| ProtectToolkit-C administration | Describes how to install, configure, secure, and maintain the ProtectToolkit-C cryptographic services suite. |
| ProtectToolkit-C programming | Describes how to use the ProtectToolkit-C Application Programming Interface (API). |
| ProtectToolkit-C management libraries programming | Describes the extended KMLIB set of high level management libraries. KMLIB has all PKCS#11 functionality but is simpler to use. |
| ProtectToolkit-J reference | Describes how to install and use the ProtectToolkit-J Java Runtime and SDK packages. Includes introductory material for the Java Cryptography Architecture (JCA) and Java Cryptography Extensions (JCE) APIs. |
| ProtectToolkit-M reference | Describes how to install, configure, and use the ProtectToolkit-M suite of applications. ProtectToolkit-M integrates the Microsoft Cryptographic API (MSCAPI), allowing you to use a ProtectServer 3 HSM as a Microsoft Cryptographic Service Provider (CSP). |
| ProtectServer HSM migration | Describes how to migrate your cryptographic objects and Functionality Modules (FMs) to your new ProtectServer 3 HSM. |
| FM SDK programming | Describes how to write, test, install, and use functionality modules to provide custom functions on a ProtectServer 3 HSM. |
| ProtectServer 3 HSM and ProtectToolkit 7 troubleshooting | Describes how to resolve issues encountered while installing, configuring, or using a ProtectServer 3 HSM with ProtectToolkit 7. |
| Third-Party Software Licenses | Lists the third-party and open-source software components that are used by every ProtectToolkit 7 client, ProtectServer 3 Network HSM appliance software, and ProtectServer 3 HSM firmware version released for the ProtectServer 3 HSM to date. |
