Thales ProtectServer Hardware Security Modules (HSM)

To set up a Thales ProtectServer HSM to work with OneSpan Authentication Server Appliance, you need to configure the following components:

Software

Administrator account

The setup process requires administrative privileges in at least one administration token and one user token on the HSM.

Functionality module (FM)

Setting up a Thales ProtectServer HSM involves copying the OneSpan Authentication Server Framework functionality module file aal2sdk to the machine which will be used for HSM administration. The OneSpan Authentication Server Framework functionality module file may be unsigned or signed, depending on your requirements. OneSpan provides both a signed and an unsigned OneSpan Authentication Server Framework functionality module (see Installing a Thales ProtectServer hardware security module ).

HSM usage limitations

• OneSpan Authentication Server Appliance only supports network HSM devices.