ProtectServer 3 HSM and ProtectToolkit 7
You are viewing the latest version of the ProtectServer 3 HSM and ProtectToolkit 7 product documentation, which covers all ProtectServer 3 HSM firmware versions and ProtectToolkit 7 client versions released to date, and is updated frequently with the latest corrections and improvements. Archived ProtectServer 2 HSM and ProtectToolkit 5 documentation sets are available in ProtectServer 2 HSM and ProtectToolkit 5.
Customer release notes
The Customer release notes (CRN) provide release-specific details of capabilities, limitations, and known/resolved issues. The CRN is organized by client software, firmware, and appliance software version for the convenience of customers using any released version. The tables below list the latest released ProtectToolkit 7 client, ProtectServer 3 HSM Firmware, and ProtectServer 3 Network HSM Appliance Software versions that can be used to operate the ProtectServer 3 HSM.
Note
The ProtectServer 3 HSM transitioned from FIPS 140-2 to FIPS 140-3 compliance with the release of ProtectServer 3 HSM Firmware 7.03.00 (validation pending). Firmware versions older than 7.03.00 comply with FIPS 140-2 Level 3 standards, while firmware 7.03.00 and newer comply with FIPS 140-3 Level 3 standards. Thales highly recommends reading Firmware 7.03.00 advisory notes before upgrading to ProtectServer 3 HSM Firmware 7.03.00 or newer.
Latest FIPS 140-3-compliant configuration
| Component version | Release date |
|---|---|
| ProtectToolkit 7.3.0 | July 2023 |
| ProtectServer 3 HSM Firmware 7.03.00 (validation pending) | July 2023 |
| ProtectServer 3 Network HSM Appliance Software 7.3.0 | July 2023 |
Latest FIPS 140-2-compliant configuration
| Component version | Release date |
|---|---|
| ProtectToolkit 7.2.1 | April 2023 |
| ProtectServer 3 HSM Firmware 7.02.02 | September 2023 |
| ProtectServer 3 Network HSM Appliance Software 7.2.1 | April 2023 |
Firmware FIPS validation status
The latest FIPS 140-2 Level 3-validated firmware is ProtectServer 3 HSM Firmware 7.01.02.
The latest firmware pending FIPS 140-3 Level 3 validation is ProtectServer 3 HSM Firmware 7.03.00.
For a complete list of supported ProtectServer 3 HSM Firmware versions and their FIPS validation status, refer to Supported ProtectServer 3 HSM firmware and boot loader versions.
Product documentation
The ProtectServer 3 HSM documentation, linked below, is provided in HTML format.
| Section | Purpose |
|---|---|
| ProtectServer 3 HSM and ProtectToolkit 7 installation and configuration | Describes how to install and configure your ProtectServer 3 HSM and the ProtectToolkit 7 client software. |
| PSESH command reference | Describes how to access and use the PSESH command shell and provides detailed syntax descriptions for each available command. |
| ProtectToolkit-C administration | Describes how to install, configure, secure, and maintain the ProtectToolkit-C cryptographic services suite. |
| ProtectToolkit-C programming | Describes how to use the ProtectToolkit-C Application Programming Interface (API). |
| ProtectToolkit-C management libraries programming | Describes the extended KMLIB set of high level management libraries. KMLIB has all PKCS #11 functionality but is simpler to use. |
| ProtectToolkit-J reference | Describes how to install and use the ProtectToolkit-J Java Runtime and SDK packages. Includes introductory material for the Java Cryptography Architecture (JCA) and Java Cryptography Extensions (JCE) APIs. |
| ProtectToolkit-M reference | Describes how to install, configure, and use the ProtectToolkit-M suite of applications. ProtectToolkit-M integrates the Microsoft Cryptographic API (MSCAPI), allowing you to use a ProtectServer 3 HSM as a Microsoft Cryptographic Service Provider (CSP). |
| ProtectServer HSM migration | Describes how to migrate your cryptographic objects and Functionality Modules (FMs) to your new ProtectServer 3 HSM. |
| FM SDK programming | Describes how to write, test, install, and use functionality modules to provide custom functions on a ProtectServer 3 HSM. |
| ProtectServer 3 HSM and ProtectToolkit 7 troubleshooting | Describes how to resolve issues encountered while installing, configuring, or using a ProtectServer 3 HSM with ProtectToolkit 7. |
| Third-Party Software Licenses | Lists the third-party and open-source software components that are used by every ProtectToolkit 7 client, ProtectServer 3 Network HSM appliance software, and ProtectServer 3 HSM firmware version released for the ProtectServer 3 HSM to date. |