Appendices

Utimaco SecurityServer Documentation

Product documentation for installation, administration, client software, HSM configuration, and operational guidance for u.trust GP HSM / SecurityServer.

Refer to the official Utimaco documentation portal or the documentation package delivered with the SecurityServer release.

Utimaco REST Crypto API (RCAPI) Documentation

API reference and operational guidance for REST-based cryptographic services, user authentication, TLS configuration, and key/token access through RCAPI.

Refer to the RCAPI documentation delivered with the RCAPI package used for this integration.

Qinsight Atlas Documentation

Partner documentation for configuring Atlas cryptographic discovery, inventory collection, CBOM generation, policy validation, and HSM integration workflows.

Refer to the Qinsight Atlas product documentation provided by Qinsight.

Atlas

Qinsight Atlas, the cryptographic posture management platform used to discover, inventory, and assess cryptographic assets exposed through the integration.

CBOM

Cryptographic Bill of Materials. An inventory of cryptographic objects, algorithms, certificates, and related metadata used for governance and risk assessment.

HSM

Hardware Security Module. A dedicated security device used to protect cryptographic keys and perform cryptographic operations in a controlled environment.

mTLS

Mutual Transport Layer Security. A TLS configuration in which both client and server authenticate each other using certificates.

RCAPI

Utimaco REST Crypto API. The REST interface used by Atlas to access cryptographic services and key/token information from the Utimaco SecurityServer environment.

SecurityServer

Utimaco SecurityServer / u.trust GP HSM used as the HSM platform for this integration.

SO

Security Officer. The administrative role responsible for HSM and user management tasks such as provisioning users and assigning permissions.

Token

A logical cryptographic container or object namespace exposed through the HSM/RCAPI environment and discovered by Atlas.

./csadm Dev=$HSM_IP:$HSM_PORT GetState

Start the SecurityServer simulator

csadm Dev=$HSM_IP:$HSM_PORT GetState

Verify HSM connectivity

csadm Dev=$HSM_IP:$HSM_PORT UserAdd

Create or verify RCAPI user

openssl req -newkey rsa:2048 -nodes -keyout atlas-client.key -out atlas-client.csr

Generate client certificate material

openssl x509 -req -in atlas-client.csr -CA ca.crt -CAkey ca.key -out atlas-client.crt

Sign the client certificate

docker run -d --name rcapi -p 8443:8443 ...

Start the RCAPI container

docker ps

Check RCAPI container status

docker logs rcapi

Review RCAPI logs

curl -k https://<rcapi-host>:8443/

Test RCAPI HTTPS reachability

curl --cert atlas-client.crt --key atlas-client.key https://<rcapi-host>:8443/<token-endpoint>

Request or validate Bearer token access