About This Guide | Utimaco Integration Guides

This guide describes the integration of KeyMirror with the Utimaco u.trust GP HSM. It provides an overview of the installation, configuration, and validation procedures required to enable telemetry and observability for PKCS#11-based applications using the Utimaco GP HSM.

Target Audience

This guide is intended for system administrators and security professionals responsible for deploying and managing KeyMirror with the Utimaco u.trust GP HSM. It assumes a basic understanding of PKCS#11, HSMs, Linux systems, and observability technologies.

Purpose of the Integration

The purpose of this integration is to enable KeyMirror to provide telemetry, metrics, and tracing for applications using the Utimaco u.trust GP HSM. By collecting PKCS#11 operation metadata and exporting it through OpenTelemetry, the integration provides enhanced observability, performance monitoring, and troubleshooting capabilities for cryptographic operations without requiring changes to the client applications.

Abbreviations

Abbreviation	Meaning
HSM	Hardware Security Module
PKI	Public Key Infrastructure
TDE	Transparent Data Encryption
PKCS	Public Key Cryptography Standards
PKCS#11	PKCS Part 11: The Cryptographic Token Interface Standard
SO	The PKCS#11 cryptographic slot Security Officer

Abbreviations

Document Conventions

The following conventions are used in this guide:

Convention	Use	Example
Bold	Items of the Graphical User Interface (GUI), e.g., menu options	Press OK
`Monospaced`	Code that is given for explanation or as an example, file paths	`chsm-create`
Italic	References and important terms	See Sample Chapter in the CryptoServer - Sample Manual

Document conventions

We use special icons to highlight the most important notes and information.

Here you will find important safety information that should be followed.

Here you will find additional notes or supplementary information.

This message indicates the expected result after the successful execution of an instruction.