Hardware Security Module Provider Configuration and Status
The Hardware Security Module Provider section shows the HSM configuration settings and the connectivity status of the HSM.
Hardware Security Module Provider Status
Select the HSM vendor configured on the firewall:
SafeNet Network only) HSM high availability is configured if checked.
High Availability Group Name
SafeNet Network only) The group name configured on the firewall for HSM high availability.
Firewall Source Address
The address of the port used for the HSM service. By default this is the management port address. It can be specified as a different port however through the Services Route Configuration in
Master Key Secured by HSM
If checked, the master key is secured on the HSM.
Shows green if the firewall is connected and authenticated to the HSM and shows red if the firewall is not authenticated or if network connectivity to the HSM is down.
You can also Hardware Security Module Status for more details on the HSM connection.
Hardware Security Module Status
Hardware Security Module Status The Hardware Security Module Status includes the following information about HSMs that have been successfully authenticated. The display is different depending ...
Set Up Connectivity with a SafeNet Network HSM
Set Up Connectivity with a SafeNet Network HSM To set up connectivity between the Palo Alto Networks firewall (HSM client) and a SafeNet Network HSM ...
Hardware Security Module Provider Settings
Hardware Security Module Provider Settings To configure a Hardware Security Module (HSM) on the firewall, edit the Hardware Security Module Provider settings: Hardware Security Module ...
Device > Setup > HSM
Device > Setup > HSM Select Device Setup HSM to configure a Hardware Security Module (HSM), perform operations, and view HSM status. What are you ...
Set Up Connectivity with a Thales nShield Connect HSM
Set Up Connectivity with a Thales nShield Connect HSM You must set up a remote file system (RFS) as a hub to synchronize key data ...
Hardware Security Operations
Hardware Security Operations To perform an operation on the Hardware Security Module (HSM) or the firewall connected to the HSM, select Device Setup HSM and ...
HSM Client Upgrade and SafeNet HSM Cluster Support
PAN-OS® 8.1 supports Thales nShield client 12.30 and SafeNet client versions 5.4.2 and 6.2.2. SafeNet HSM servers support an HA cluster of up to 16 ...
Set Up Connectivity with an HSM
Set Up Connectivity with an HSM HSM clients are integrated with PA-3000 Series, PA-3200 Series, PA-5000 Series, PA-5200 Series, PA-7000 Series, and VM-Series firewalls and ...
HSM Authentication Select Setup Hardware Security Module and configure the following settings to authenticate the firewall to the HSM. HSM Module Authentication Server Name Select ...