payShield 10K Installation and User Guide
© Thales Group
Page 35
All Rights Reserved
3 Physical Description
Note:
For the10G Ethernet Platform Variant, follow this link:
Chapter 5, “payShield 10K 10G Ethernet Hardware
.
The payShield 10K can both stand alone or be part several units installed in a standard 19-inch cabinet.
The unit is supported on telescopic runners that slide out via the front of the cabinet.
3.1 Front panel
3.1.1 Key locks and keys
The front panel is equipped with two key locks. Each lock has its own key. Each key is assigned to a “key holder”
(i.e., a security officer). To physically lock the unit into the rack, each key holder inserts their key into the appropriate
lock and turns the lock to the locked position.
When in the locked position, the HSM cannot be removed from the rack.
The mechanical locking of the unit into the rack provides low level resistance to a direct attack. Note that the unit
itself cannot be opened.
To remove the unit from the rack, both key holders insert their respective keys and turn the locks to the unlocked
position.
3.1.1.1 Changing the HSM state via the key locks
Micro-switches attached to the locks allow the security state of the HSM to be changed.
Turning the cam lock keys changes the state of the HSM.
HSM states:
•
Online (both locks are locked)
•
Offline (one lock is locked and the other is unlocked)
•
Overall rack dimensions (WxDxH)
1U rack 19” x 29” x 1.75” (482.6mm x 736.6mm x 44.5mm)
