Thales nShield Connect 6000 - asiapeak.com

1 Hardware security module Thales nShield Connect 6000 , part of the nCipher productline, is a network-attached, general-purpose hardware securitymodule (HSM) that protects up to 100 clients by safeguardingtheir encryption and digital signing keys and processingsensitive data on the trusted appliance. Its unique dual, hot-swap power supplies and redundant, field-replaceable fansmake nShield Connect 6000 fault tolerant. Providing highavailability, scalability and remote management, it enablesorganizations to build reliable, future-proof cryptographicservices. Its key management is validated for FIPS 140-2 Level3 and Common Criteria EAL4+. KEY BENEFITS> Thales nShield Connect 6000 >Enhances security for criticalapplications>Reduces cost of compliance >Simplifies encryption and signing keymanagement >Protects sensitive data by processing it on secure hardware >Helps ensure business continuity andminimize downtime with unique dual,hot-swap power supplies andredundant, field-serviceable fans>Compatible with Thales nShield andThales netHSM>Offers exceptional scalability withunsurpassed performance for up to100 clients>Delivers FIPS and Common Criteria0672 nShield Connect Datasht:Layout 1 10/7/09 10:18 Page 1 Americas:2200 North Commerce Parkway, Suite 200, Weston, Florida 33326 Tel: +1 888 744 4976 or +1 954 888 6200 Fax: +1 954 888 6211 E-mail: Pacific.

2 Units 2205-06, 22/F Vicwood Plaza, 199 Des Voeux Road Central, Hong Kong, PRC Tel: +852 2815 8633 Fax: +852 2815 8141 E-mail: 2, 103-105 Northbourne Avenue, Turner, ACT 2601, Australia Tel: +61 2 6120 5186 Fax: +61 2 6120 5101 E-mail: Middle East, Africa:Meadow View House, Long Crendon, Aylesbury, Buckinghamshire HP18 9EQ Tel: +44 (0)1844 201800 Fax: +44 (0)1844 208550 E-mail: security for applications nShield Connect 6000 enables enterprises toadd hardware protection to critical applicationssuch as public key infrastructures (PKIs),databases, web and application servers. Usingstandard cryptographic interfaces, nShieldConnect 6000 integrates readily with MicrosoftCertificate Services (PKI), Entrust AuthoritySecurity Manager, RSA Certificate Manager,Oracle Database, Microsoft SQL Server, andmany other applications.

3 nShield Connect 6000 features tamper-responsive, rack-mountable hardware withoptional slide rails. Secure code execution forsensitive data processing on the HSM platformprotects against insider and Trojan adds client hardware authentication. Availability Designed for business continuity, nShieldConnect 6000 is the world s only general-purpose HSM with dual, hot-swap powersupplies. The redundant fans can be replacedwithout sending the unit to a service center. Tofurther increase availability, several HSMs canbe clustered and load balanced. nShield Connect 6000 is the world s onlygeneral-purpose HSM with dual, hot-swappower suppliesManagement The Security World management softwarecentrally manages nShield Connect 6000 , nShield and netHSM to reduce setup andadministration time.

4 Security World securelysupports remote operation of HSMs in lights-out data centers, disaster recovery even fortotal hardware replacements, and key sharingacross HSMs and geographies. Keys and metainformation can be automatically backed upwithout requiring additional hardware as thesystem, reducing the total cost of operations. Scalability and FlexibilityTo provide services for up to 100 clients, nShield Connect 6000 offers hardwareacceleration for cryptographic operations,making it the world s fastest network-attachedHSMs with up to 6,000 signing transactionsper second (TPS) with 1,024 RSA keys. UsingRSA 2,048 bit keys, nShield Connect 6000excels at up to 3,000*. Web servers, such asMicrosoft IIS and Apache, can increase SSLthroughput by off-loading handshakes operationsto the nShield 6000 .

5 nShield Connect 6000 integrates withapplications through standard interfacesincluding PKCS#11, Java CryptographyExtension (JCE), Microsoft CAPI and CNG. It iscompatible with other Thales nShield and ThalesnetHSM products and can be upgraded tosupport additional features using various OptionPacks. nShield Connect 6000 supports a broadrange of operating systems, including Windows2008/2003/Vista/XP, Linux Solaris, AIX andHPUX. Two Gigabit Ethernet ports enable theHSM to service two network and compliance nShield Connect 6000 supports a broad rangeof public-key and symmetric algorithms,including a full Suite B implementation withoptional, fully licensed elliptic curve cryptography(ECC).

6 nShield Connect 6000 s keymanagement is validated to FIPS 140-2 Level 3and Common Criteria EAL 4+. Following securitybest practice and to enable compliance, itseparates administrative and operational dutieswith two-factor authentication and multiple-person control (k of n). These operator groupscan segregate access to keys by application,role, division, or geography. Integrated services Thales offers professional services to ensure abest practice implementation of Thales can benefit from developersupport to integrate Thales HSMs with customapplications or to develop custom applicationsto be executed on the HSM to process sensitivedata. *Performance may vary depending on operating system, application,network topology and other factors.

7 For more information, please nShield Connect 6000 >> Thales - Information Systems SecurityThe Thales policy is one of continuous development and consequently the equipment may vary in detail from the description and specification in this publication. Thales - July 09 MGD0672 XISC1045 Certificate no. EMS 73838 Certificate no. FS698360672 nShield Connect Datasht:Layout 1 10/7/09 10:18 Page 2