>
    Strata Copilot
    Hardware Security Module Provider Configuration and Status
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. PAN-OS Web Interface Help
    4. Device
    5. Device > Setup > HSM
    6. Hardware Security Module Provider Configuration and Status
    Download PDF
    Next-Generation Firewall

    Hardware Security Module Provider Configuration and Status

    Table of Contents

    Hardware Security Module Provider Configuration and Status

    The Hardware Security Module Details section shows the HSM configuration settings and the connectivity status of the HSM.
    Hardware Security Module Details
    Provider Configured
    Select the HSM vendor configured on the firewall:
    • None
    • Thales Luna Network HSM
    • Thales CipherTrust Manager HSM
    • Entrust nShield HSM
    High Availability
    (Thales Luna Network only) HSM high availability is configured if checked.
    High Availability Group Name
    (Thales Luna Network only) The group name configured on the firewall for HSM high availability.
    Remote Filesystem Address
    (Entrust nShield only) The address of the remote filesystem.
    Firewall Source Address
    The address of the port used for the HSM service. By default this is the management port address. It can be specified as a different port however through the Services Route Configuration in DeviceSetupServices.
    HSM Client Version on Firewall
    Shows the HSM client version installed.
    Master Key Secured by HSM
    If checked, the master key is secured on the HSM.
    Status
    Shows green if the firewall is connected and authenticated to the HSM and shows red if the firewall is not authenticated or if network connectivity to the HSM is down.
    Review Hardware Security Module Status for more details on the HSM connection.

    © 2026 Palo Alto Networks, Inc. All rights reserved.