About This Guide | Utimaco Integration Guides

This guide describes how to integrate a Utimaco u.trust GP HSM with Para Vault: the HSM generates and holds Para Vault's server key within the hardware security boundary, so that Para Vault relies on the HSM to obtain the key at startup.

Target Audience

This guide is intended for Para Vault administrators and Utimaco HSM administrators.

Purpose of the Integration

This integration ensures that privileged account passwords are protected and used securely and automatically, reducing risk and meeting compliance requirements: Para Vault's server key is protected by HSM hardware, and the key is never written to disk in plaintext.

Abbreviations

Abbreviation	Meaning
HSM	Hardware Security Module
PKI	Public Key Infrastructure
TDE	Transparent Data Encryption
PKCS	Public Key Cryptography Standards
PKCS#11	PKCS Part 11: The Cryptographic Token Interface Standard
SO	The PKCS#11 cryptographic slot Security Officer
DB	Database
JRE	Java Runtime Environment
MBK	Master backup key
P11CAT	the PKCS#11 graphical interface tool
CXI	Cryptographic eXtended Interface
FIPS	Federal Information Processing Standards
AES	Advanced Encryption Standard
CA	Certificate Authority
GCM	Galois/Counter Mode
IP	Internet Protocol
LAN	Local Area Network
PCIe	PCI Express Interface
PIN	Personal Identification Number
URL	Uniform Resource Locator

Abbreviations

Document Conventions

The following conventions are used in this guide:

Convention	Use	Example
Bold	Items of the Graphical User Interface (GUI), e.g., menu options	Press OK
`Monospaced`	Code that is given for explanation or as an example, file paths	`chsm-create`
Italic	References and important terms	See Sample Chapter in the CryptoServer - Sample Manual

Document conventions

We use special icons to highlight the most important notes and information.

Here you will find important safety information that should be followed.

Here you will find additional notes or supplementary information.

This message indicates the expected result after the successful execution of an instruction.