Configuring Your System To Use Ncipher Hardware Security Modules - Oracle Database B10772-01 Administrator's Manual

Configuring Your System to Use nCipher Hardware Security Modules
Hardware security modules made by nCipher Corporation are certified to operate
with Oracle Advanced Security. These modules provide a secure way to store keys
and off load cryptographic processing. Primarily, these devices provide the
following benefits:
Oracle Components Required To Use an nCipher Hardware Security Module
To use an nCipher hardware security module, you need the following components:
About Installing an nCipher Hardware Security Module
To use the secure accelerator, you must provide the absolute path to the directory
that contains the nCipher PKCS #11 library (including the library name) when you
create the wallet by using Oracle Wallet Manager. This enables the library to be
loaded at runtime. Typically, the nCipher card is installed at the following locations:
Off load of cryptographic processing to free your server to respond to more
requests
Secure private key storage on the device
Administration of keys controlled through the use of smart cards
You must contact your nCipher representative to obtain
Note:
certified hardware and software to use with Oracle Advanced
Security.
nCipher Hardware Security Module
Supporting nCipher PKCS #11 library for your platform as follows:
– (UNIX 32 bit): libcknfast.so library
– (UNIX 64 bit): libcknfast-64.so library
– (Windows): cknfast.dll library
You must contact your nCipher representative to have the
Note:
hardware security module or the secure accelerator installed and to
acquire the necessary library.
These tasks must be performed before you can use an nCipher
hardware security module with Oracle Advanced Security.
Configuring Your System to Use Hardware Security Modules
Configuring Secure Sockets Layer Authentication 7-49