HSM independence concept

The Authentication Suite Server SDK for HSM independence component is a collection of Level 2 functions giving integrators simplified hardware security module support which is independent of the HSM type.

On the host, Authentication Suite Server SDK does not perform any HSM management, as for example initialization, communication, or finalization. Integrators need to write this functionality separately to Authentication Suite Server SDK, in line with the particular HSM.

Authentication Suite Server SDK provides the host-side generation and processing of the messages sent to and from the HSM. Thus, Authentication Suite Server SDK and HSM management tasks are separated from each other.

For each Authentication Suite Server SDK function performed on the HSM, the host-side Authentication Suite Server SDK must:

• Generate an HSM command message to send from the host to the HSM
• Process the HSM reply message sent back from the HSM