>
    Strata Copilot
    Hardware Security Module Provider Configuration and Status
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Device
    4. Device > Setup > HSM
    5. Hardware Security Module Provider Configuration and Status
    Download PDF
    Next-Generation Firewall

    Hardware Security Module Provider Configuration and Status

    Table of Contents

    Hardware Security Module Provider Configuration and Status

    The Hardware Security Module Provider section shows the HSM configuration settings and the connectivity status of the HSM.
    Hardware Security Module Provider Status
    Provider Configured
    Select the HSM vendor configured on the firewall:
    • None
    • SafeNet Network HSM
    • nCipher nShield Connect (Entrust nShield)
    High Availability
    (SafeNet Network only) HSM high availability is configured if checked.
    High Availability Group Name
    (SafeNet Network only) The group name configured on the firewall for HSM high availability.
    Remote Filesystem Address
    (Entrust nShield only) The address of the remote filesystem.
    Firewall Source Address
    The address of the port used for the HSM service. By default this is the management port address. It can be specified as a different port however through the Services Route Configuration in DeviceSetupServices.
    HSM Client Version on Firewall
    Shows the HSM client version installed.
    Master Key Secured by HSM
    If checked, the master key is secured on the HSM.
    Status
    Shows green if the firewall is connected and authenticated to the HSM and shows red if the firewall is not authenticated or if network connectivity to the HSM is down.
    Review Hardware Security Module Status for more details on the HSM connection.

    © 2026 Palo Alto Networks, Inc. All rights reserved.