HSM Security Policy
The true state of the HSM will be obtainable from the status register which is read by the host
over the PCI interface.
6.3 Serial Interface
The serial interface is disabled in the production version of the HSM board.
6.4 PCI Interface
This interface is used to provide data and commands to the HSM board. It is also used to read
data and status from the HSM.
6.5 Backup Battery Interface
The Backup Battery Interface is used to provide backup power to the HSM. This gives the HSM
the capability to maintain and protect secrets should PCI power become unavailable. The
battery is continuously monitored by the HSM for a voltage low condition. This makes it possible
to alert an operator. The operator may then replace the battery. This can be done without loss
of critical security parameters as long as the battery is replaced when PCI power is present. If
the battery is removed while PCI power is absent, all critical security parameters contained
within the HSM will be erased.
6.6 PCI Power Interface
The PCI Power Interface will provide the power necessary to perform all other HSM
functions.
7.1 Components
7.1 Bulk Crypto
This component performs cryptographic hashing and symmetric cryptographic operations.
224
User Guide
Comments? infodev@avaya.com
April 2013