Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 215 / 518

Configuring Your System to Use Hardware Security Modules
Configuring Secure Sockets Layer Authentication 7-49
Configuring Your System to Use nCipher Hardware Security Modules
Hardware security modules made by nCipher Corporation are certified to operate
with Oracle Advanced Security. These modules provide a secure way to store keys
and off load cryptographic processing. Primarily, these devices provide the
following benefits:
■
Off load of cryptographic processing to free your server to respond to more
requests
■
Secure private key storage on the device
■
Administration of keys controlled through the use of smart cards
Oracle Components Required To Use an nCipher Hardware Security Module
To use an nCipher hardware security module, you need the following components:
■
nCipher Hardware Security Module
■
Supporting nCipher PKCS #11 library for your platform as follows:
– (UNIX 32 bit):
libcknfast.so
library
– (UNIX 64 bit):
libcknfast-64.so
library
– (Windows):
cknfast.dll
library
About Installing an nCipher Hardware Security Module
To use the secure accelerator, you must provide the absolute path to the directory
that contains the nCipher PKCS #11 library (including the library name) when you
create the wallet by using Oracle Wallet Manager. This enables the library to be
loaded at runtime. Typically, the nCipher card is installed at the following locations:
Note:
You must contact your nCipher representative to obtain
certified hardware and software to use with Oracle Advanced
Security.
Note:
You must contact your nCipher representative to have the
hardware security module or the secure accelerator installed and to
acquire the necessary library.
These tasks must be performed before you can use an nCipher
hardware security module with Oracle Advanced Security.