Managing Hardware Security Modules

OCSPd supports PKCS#11 compatible crypto devices (Hardware Security Module, Smartcard, Token) to store the private key of the OCSP Signers.

Supported Hardware Security Modules

As of today, OCSPd has been successfully testes with the following Hardware Security Modules:

SoftHSM v1 & v2;
Bull Proteccio;
Gemalto Safenet Protect Server;
Gemalto Safenet Luna Network HSM;
nCipher nShield Connect HSM;
Utimaco SecurityServer.

If your HSM is not in the list above, this does not necessarily mean that it is not functional, just that it is not officially supported. Contact us and we will accommodate to have it supported.