Introduction

Thank you for purchasing our CryptoServer security system. We hope you are satisfied with our product. This paper provides an integration guide explaining how to integrate an Utimaco CryptoServer Hardware Security Module (HSM) with Entrust Authority Security Manager.

Please do not hesitate to contact us if you have any suggestions or comments.

About this Guide

This guide describes how to enable HSM integration with Entrust Authority Security Manager, including the Security Manager installation.

Target Audience for this Guide

This guide is intended for Security Manager administrators and HSM administrators.

Document Conventions

The following conventions are used in this guide:

Convention

Use

Example

Bold

Items of the Graphical User Interface (GUI), e.g., menu options

Select Details and click on Properties button

Monospaced

Code that is given for explanation or as an example, file paths

certreq.exe -new request.inf IISCertRequest.csr

Italic

References and important terms

Operating system listed in Software Requirements

Document conventions

We use special icons to highlight the most important notes and information.

Here you will find important safety information that should be followed.

Here you will find additional notes or supplementary information.

This message marks the result expected after the successful execution of an instruction.

Abbreviations

We use the following abbreviations in this guide:

Abbreviation

Meaning

HSM

Hardware Security Module

PKI

Public Key Infrastructure

TSP

Time-Stamp Protocol

LDAP

Lightweight Directory Access Protocol

CA

Certification Authority

CRL

Certificate Revocation List

PKCS#11

PKCS Part 11: The Cryptographic Token Interface Standard

PKCS

Public Key Cryptography Standards

NTFS

New Technology File System

DV

Document Verifier

CVCA

Country Verifying Certification Authority

CA DN

Certification Authority Distinguished Name

DN

Distinguished Name

RDN

Relative Distinguished Name

AD LDS

Active Directory Lightweight Directory Services

NIC

Network Interface Card

ASH

Administration Service Handler

XML

Extensible Markup Language

XAP

XML Administration Protocol

SSL

Secure Sockets Layer

CSCA

Country Signing Root Certificate Authority

CDP URL

CRL Distribution Point URL

AIA

Authority Information Access

List of abbreviations