Sun Oracle Crypto Accelerator 6000 Board, User Manual

Page: 24 / 266

2 Sun Crypto Accelerator 6000 Board User’s Guide for Version 1.1 • February 2013
New Features in the 1.1 Release
■
Centralized key management (see Chapter 4 for details)
■
Multiple keystore support (see Chapter 3 for details)
■
Firmware based ECC
■
Firmware based SHA-512
■
Improved keystore backup (see Chapter 3 for details)
■
Improved Auditing (see Chapter 3 for details)
Key Features
■
Low-profile, half-length PCE Express, 8-lane (bi-8)
■
Support for Oracle Solaris Cryptographic Framework
■
Accelerates IPsec and SSL cryptographic functions
■
Session establishment rate – up to 13,000 operations per second
■
Bulk encryption rate – up to 1 Gbps
■
Provides up to 2048-bit RSA encryption
■
Provides tamper-resistant secure key storage and crypto acceleration benefits for
PKCS#11-aware applications such as Sun Java System Server products
■
Provides centralized keystore support, enabling multiple machines to access a
common key repository
■
FIPS 140-2 Level 3 certification
■
Low CPU utilization – frees up server system resource and bandwidth
■
Secure private key storage and management
■
Dynamic reconfiguration (DR), and redundancy and failover support on Sun’s
midframe and high-end servers
■
Support for Oracle Solaris 10 OS and future compatible releases
■
Support for Linux: Red Hat EL 4.0, Red Hat EL Server 5, SuSE Enterprise 10 SP 1
■
Support for openCryoptoki software
■
Support for the Service Management Facility (SMF), which is an improved
mechanism for controlling system startup and the relationship between services.
■
Multi-Admin keystore security, supporting the requirement of multiple security
officers to authenticate keystore backup and restore operations.
■
Serial port for direct input adminstration interface
■
USB port for keystore backup and restore to USB mass storage devices