Host Security Module (HSM)

PrivateServer HSM (Hardware Security Module)

PrivateServer™ is ARX’s highly secure (FIPS 140-2 Level 3), network attached, Hardware Security Module (HSM) that provides a secure environment for data encryption. PrivateServer conducts sensitive cryptographic operations, secure key storage, and management of a large number of keys.

Quick Links

			Contact Us
			Product Brochure
			Features

What Does the PrivateServer HSM Do?
How Does the HSM Work?
PrivateServer HSM Benefits
Who is the Host Security Module Solution Aimed At?
Certification
Technical Specification

ARX has provided a solution
that is secure and flexible

Johan Palmquist, VolvoFinans

Selected Clients

What Does the PrivateServer HSM Do?

The host security module provides a wide range of cryptographic operations, such as data encryption and secure key storage, for application servers using TCP/IP.

These include:

»	EMV Card issuance;
»	EMV authorizations;
»	EMV data preparation;
»	EMV-CAP authorizations;
»	PIN verification; and
»	Advanced profile-based PIN Mailers.

Any application that requires a cryptographic-based process will access PrivateServer through the network using the PrivateServer client. All data transferred across the network is encrypted. The process then takes place in the server, which accesses relevant keys provided the connecting user has the necessary permissions to do so. The entire operation is performed by PrivateServer, which then replies back to the client application to enable the transaction.

»	Stores and securely manages a large number of keys.
»	Strong user authentication.
»	Internal audit mechanism.
»	Secure upgrade.
»	Secure backup and restore.
»	Customizable interface.
»	Secure, tamper-evident device.
»	Easy-to-deploy and manage.
»	Uses standard API's: PKCS#11, Microsoft® CAPI and JCA Strict user access control.
»	Cost effective, and more.

PrivateServer is aimed at financial institutions, card issuers, and governmental organizations requiring security-related deployments such as the CA Signing Engine, EMV data preparation and card personalization, PIN verification, data encryption, and data signing.

btnTop Back to Top vert

Certification

FIPS 140-2 level 3 certification granted.

Asymmetric Encryption Algorithm

»	RSA (320-4096 bits)

Physical Dimensions

»	W 48.3cm; D 44.7cm; H 17.8cm
»	6U Rack mountable
»	Weight 15KG

PKI Vendor Compatibility

»	Microsoft CA (Win 2000, 2003 Server)
»	Microsoft Certificate Lifecycle Management (CLM)
»	Entrust PKI
»	Baltimore UniCERT

Authentication Modes:

»	Smart Card (Windows only)
»	USB Token (Windows only)
»	Software Key (Windows, Linux, HP, AIX and Solaris)

Symmetric encryption algorithms:

»	DES
»	Triple-DES
»	AES

Performance

»	500 RSA Signatures per second (1024 bit)
»	5000 Symmetric Transactions per second

Security Standards Certification

»	FIPS 140-2 Level 3
»	FCC Subpart B Class B
»	EN 55022 Class B for AC mains and Ethernet lines

Hash functions

»	SHA-1, SHA-256, SHA-512
»	ISO-Hashing
»	ARDFP
»	MD5

Secure key Storage

Yes

Remote Management

Yes

Connectivity

»	TCP/IP Ethernet

Cryptography API support

»	PKCS#11
»	Microsoft-Cryptographic API (CAPI)
»	Java (JCA or extended)

OS Support (Client)

»	MS Windows 2000, XP, 2003 Server, Vista
»	Sun/ Solaris (32 and 64 bit)
»	HP-UX
»	AIX (32 and 64 bit)
»	OS/2
»	Linux
»	STRATUS/VOS
»	Tandem
»	MVSOS390
»	OpenVMS

Ready to learn more about the benefits of using PrivateServer HSM (Host Security Module) for data encryption, key storage, and management? Get more information today or Contact us here and we’ll be happy to explain why this system is a must-have for secure key storage.

Learn about CoSign’s digital signature solution or try the free CoSign demo online.