SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

SafeNet KeySecure Appliance

kalila avatar
kalila
15 diapositives · 1.2K Views · Jul 17, 2014

SafeNet KeySecure Appliance . Module 4: Lesson 1 SafeNet StorageSecure Storage Security Course. Lesson Objectives. By the end of this lesson, you should be able to: Describe SafeNet KeySecure appliance components. KeySecure. KeySecure Appliance Major Components.

#safenet keysecure appliance #safenet keysecure appliance ppt #powerpoint #presentation
SafeNet KeySecure Appliance - slide 1
01 / 15SafeNet KeySecure Appliance
1 / 17

Télécharger la présentation

SafeNet KeySecure Appliance
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. SafeNet KeySecure Appliance Module 4: Lesson 1 SafeNet StorageSecure Storage Security Course

  2. Lesson Objectives • By the end of this lesson, you should be able to: • Describe SafeNet KeySecure appliance components

  3. KeySecure

  4. KeySecure Appliance Major Components • Note: The physical location of some components might be different

  5. KeySecure k460 Logical View Smart Card KMIP Clients NAE-XML Clients Smart Card Reader KS-KMIP KS-SSKM KeySecure CentOS Xen VM SSKM CentOS Administration PC iKey SSMC PKCS#11 Client PKCS#11 Client PED TCP socket connections NTLS Proxy Service Luna HSM drivers StorageSecure Luna K6 PCI HSM Xen Hypervisor BES (OpenKey) Direct connection or RemotePED FIPS-140-2 Level 3 Legacy DataFort Legacy LKM Dell Based Next Generation KeySecure Hardware Platform

  6. KeySecure Appliance Front View • Locking Bezel • Unlock the protective bezel to access the power button. • Power Button and Power Indicator • This button is used to power up or turn off the appliance. The power-on indicator lights when the system power is on. • LCD Panel • Provides Hardware information. • Hard Disks • The appliance supports two 2.5” SATA hard disks.

  7. KeySecure Appliance Rear View • DB9 Serial Console Port • The DB9 port is used to perform first-time initialization and gain console access to the appliance. • Ethernet Interfaces • The appliance has two gigabit ethernet interfaces. • Power Supplies • The appliance has two hot-plug high-efficient Energy Smart PSUs. • PED port • The PED port is used to connect the PIN entry device (PED) to the KeySecure. Ethernet Interfaces Serial Port HSM PED Port

  8. KeySecure Appliance Hardware • Major components • Uses SafeNet LUNA K6 HSM • Two disk drives in a RAID 1 (Mirror) configuration • Certification • KeySecure provides FIPS 140-2 Level 3 using the Luna K6 card. • FIPS 140-2 Level 2 for the KeySecure Chassis is planned to be achieved. • Field Replaceable Units (FRUs) • Power supplies and Power supplies fans • Hard drives

  9. KeySecure Appliance Software • KeySecure Database • Hard disks store PostgreSQL SQL database • For StorageSecure keys - KeySecure will back up Domain Keys (DK) and Cryptainer Keys (CK) • For StorageSecure configuration • SQL has built-in data integrity checks and features • High Scalability • Up to 100 SafeNet StorageSecure appliances per KeySecure-SSKM appliance • Up to 10,000,000 keys per KeySecure-SSKM • Up to 1,000,000 keys per KeySecure-KMIP

  10. KeySecure Appliance Software – Cont. • High Availability • Is done through linking the KeySecure-SSKM together in a KeySharing Group (up to 16 appliances in a group).

  11. KeySecure Appliance Communication • Configuration databases • Certain SafeNet StorageSecure changes trigger immediate backup of StorageSecure configDB to KeySecure-SSKM • Every 120 minutes (configurable) • SafeNet StorageSecure backs up to KeySecure appliance if needed • KeySecure appliance backs up its own configuration database to peer-linked KeySecure appliances • Keys • Every 5 seconds, KeySecure-SSKM appliance queries linked SafeNet StorageSecure appliances for new keys • Incrementally new keys are evaluated and replicated • KeySecure-SSKM pulls concurrently from multiple StorageSecure appliances and peer-linked KeySecure-SSKM appliances

  12. Migration from Legacy DataFortand LKM appliances to StorageSecure and KeySecure

  13. Migration from DataFort/LKM to StS/KS • The migration process in high level • Make sure we have access to the DataFort and to the LKM if available • Transfer the Keys: • If NetApp LKM is used, link the LKM to KeySecure and transfer the keys. • If NetApp LKM is not used, link the DataFort to KeySecure and transfer the keys. • Link the KeySecure to StorageSecure and transfer the Keys • Recommendation • For Migration from DataFort / LKM to StorageSecure / KeySecure contact SafeNet technical support or professional services teams in order to receive more information.

  14. Questions?

  15. Thank You