Chapter 1: SafeNet ProtectServer PCIe HSM Hardware Installation
When keeping the HSM in storage (without keys present) it is recommended that you isolate or disconnect the
battery to extend its lifespan. You can use the
ctcheck -b batterystatus
command to test the battery's
condition. If the Battery Status indication reports as
LOW
, back up the HSM keys before powering down the
PC.
**WARNING**
Disconnecting the battery deletes all key material on the HSM.
Ensure that you back up your HSM before disconnecting the power. The keys are
not deleted immediately. Capacitors continue to supply power for approximately 30
seconds after battery disconnect.
The Battery Jumper Header
The battery jumper is a three-pin jumper used to engage or disengage the battery.
The battery is in the ON position when a jumper is inserted on the center and left pins, as shown in
of the card" on the previous page
The battery is in the OFF position when a jumper is inserted on the center and right pins. This setting is not
required for normal operation.
CAUTION!
Do not change the jumper setting unless instructed by SafeNet support.
The Decommission Jumper Header
Place a jumper on the decommission jumper header to decommission the HSM. Decommissioning deletes all
of the key material on the HSM.
The Tamper-Input Header
The tamper-input header connects an external tamper device to the card. By default, it has a jumper in place
across both pins. To use an external tamper device, run a two-wire cable to your chassis-tamper switch or
similar device to open the circuit in the case of a tamper event.
The Polarity Jumper Header
The polarity jumper header is used to configure the card's operating mode. Do not change this jumper setting.
Installing the Adapter
The adapter is a PCI Express Specification 1.1-compliant device. It can be fitted in any spare PCIe slot on the
motherboard of formats x4, x8, or x16. If necessary, please consult the documentation accompanying your
host system motherboard to find the PCIe slots.
If you are using a tamper-detection device, route the cable to it before closing the computer cover.
PCIe HSM Access Provider Installation
After successful installation of the adapter:
1.
Install the HSM Access Provider package (
PTKpcihsm2
).
SafeNet ProtectToolkit 5.4 Installation Guide
007-013682-002 Rev. A 08 January 2020 Copyright 2009-2020 Gemalto
14
