8. Physical Security
This chapter provides guidance on the physical security controls available on the
different nShield platforms and the procedural controls required to maintain those
physical security controls across the product's lifecycle.
The industry terms "tamper resistance", "tamper evidence", "tamper detection", and
"tamper response", as defined in the glossary, will be used when discussing the physical
security controls available.
8.1. nShield Edge physical security controls
The nShield Edge uses Tamper Resistance and Tamper Evident physical security controls
to protect sensitive security parameters within the unit:
The mini HSM within the unit is covered in an epoxy encapsulant to resist tamper
attempts. This is a tamper resistant control.
This would also be a tamper evident control as well if it could be
inspected. However, the internal mini HSM is additionally protected by
the security seal control on the enclosure boundary and therefore can't
be inspected.
Once assembled the nShield Edge can't be disassembled without breaking the security
seal. This is a tamper evident control.
Once assembled the nShield Edge is difficult to disassemble without disfiguring the
fascia. This is a tamper evident control.
See
Tamper inspection
evident security controls.
8.2. nShield Solo+ physical security controls
The nShield Solo+ uses Tamper Resistance and Tamper Evident physical security controls
to protect sensitive security parameters within the unit:
The nShield Solo+ card is covered in an epoxy encapsulant to resist and provide evidence
of tamper attempts.
See
Tamper inspection
tamper evident security controls.
nShield® Security Manual
for procedural control guidance required to maintain tamper
for procedural control guidance required to maintain and manage
56 of 90
Need help?
Do you have a question about the nShield and is the answer not in the manual?