search for: hsms

I am essentially asking the same question that Eirik Overby asked a couple of years ago. Is anyone aware of PCI-X/PCIe hardware security modules that are supported on FreeBSD? I have not seen any on the FreeBSD hardware compatibility lists. Again, as Eirik noted in his question, HSMs are not simply crypto accelerators (which are supported on FreeBSD), they also are a means of storing keys with physical, tamper-resistant security. Thanks. Ed Sykes

Hello, For some time now, our users have been encountering a problem when using scp to overwrite files on our mass-storage system, which uses SGI's DMF product. I don't have any data as to whether or not any other HSMs would be similarly affected. The scenario is that a user is overwriting a file (via scp) that has previously been migrated to tape. The scp opens the file for writing, but does not truncate the file. This causes DMF (the HSM) to recall the file from tape and the scp hangs until it is successfully...

...FreeBSD version of their pkcs#11 libraries and OpenSSL engine implementation for their WebSentry devices. This was indeed done, but there has been no support or updates since, and the software vendor we are using have since started moving to other ways of interacting with their supported HSMs - meaning that we are slowly being left in the dust. I am therefore researching other possible vendors of HSM devices. They need to be external and network-attached (i.e. no kernel mode drivers necessary), and they need to fulfill certain requirements, first and foremost the FIPS 140-1 lev...