Transcription of 007-007171-012 CRN PTK 5-3 RevA - …
1 :08 December2016 ,SecureMessaging, sPKCS# : SafeNetProtectServerNetworkHSM intelligentcryptographicadapter(external networkapplianceengine). SafeNetProtectServerPCIeHSM intelligentcryptographicadapter(PCIebus) . ProtectServerExternal(PSE) ProtectServerInternalExpress(PSI-E) , : ThelegacyPSEandPSI-EHSM scontaintheK5cryptographicengine. ,theSafeNetProtectServer/ProtectToolkits oftwareincludesthefollowingcomponents: SafeNetProtectServer/ProtectToolkit-C ToolkitforPKCS#11andCLanguageAPIcalls SafeNetProtectServer/ProtectToolkit-J APIsupportforJava SafeNetProtectServer/ProtectToolkit-M-Mi crosoftCAPIandCNGsupport(Windowsonly)Not e: , "NewFeaturesandEnhancements" : ,withthefollowinglimitations: ,ensurethatalloftheHSMPCI ecardsareofthesametype(alllegacyPSI- ). TheFMdeletecommand(ctconf l) , : ,thepreviousversionofthesereleasenotesca nbefoundatthefollowinglocation: :CustomFMcallsthroughCryptoki,SecureMess aging,andHA/WLDT henewFMSC_SendReceivefunctionallowscusto mFMstobecalleddirectlythroughtheCryptoki interface,ratherthanthroughtheMessageDis patcherinterface(ETHSM).
2 AnewsampleFM,secfmenc, : SecureMessaging:sendandreceiveFMrequests inencryptedform HighAvailability/WorkLoadDistribution: ,allowingthedevelopment,compilation,andt estingofFMsonallsupportedWindowsoperatin gsystems(see"SupportedPlatforms" onpage 6). "SupportedPlatforms" onpage # ,orwhenflagsaresetto"0"(allflagscleared) . #11 Mechanismsflag,whenset(ctconf-fw), : CKM_CONCATENATE_BASE_AND_DATA CKM_CONCATENATE_BASE_AND_KEY CKM_CONCATENATE_DATA_AND_ CKM_XOR_BASE_AND_DATA CKM_XOR_BASE_AND_KEY CKM_EXTRACT_KEY_FROM_ ,thesoftwareemulationbatchfilesforctbrow se,KMU,andgCTAdminhavebeenremoved, ,whichdeterminesthetime(inseconds) , ,capabilitiesvarybetweenfirmwareversions , , ,a buffertoosmall , , ( )willcauseacompilationfailurewiththefoll owingerror:Internalcompilererror:invect_ transform_stmt, :4887 Toavoidthisbug, ,orattheendofopt/safenet/fm- :CFLAGS+=-fno-tree-vectorizeRunctconf-to nFirstInstallofHSMT hefirsttimeyouinstallaSafeNetProtectServ erHSM, , ,try tampering , , , , , : RSA:mustbe2048,3072,or4096bits(verify-10 24or1536bits) DSA:mustbe2048,3072,or4096bits(verify-10 24or1536bits) EC.
3 Mustbe224bitsatminimum(verify-160bits)En d-UserLicenseAgreementTheEULA forthisrelease(008-010005-001_EULA_HSM_S W_revK) ,PKCS# , , (R1andR2)64-bitC/M/JAllplatformsC/JNetwo rkHSM,PSES erver2012R264-bitC/M/JAllplatformsC/JNet workHSM,PSE732-bit--C/J(KSPsupported)All platforms764-bitC/M/JAllplatformsC/JNetw orkHSM, ,PSERHEL764-bitC/JAllexceptPSI-E(K5)C/JN etworkHSM,PSESUSE1264-bitC/JAllexceptPSI -E(K5)C/JNetworkHSM, ,PSEC/JNetworkHSM, ,PSEC/JNetworkHSM, ,PSEC/JNetworkHSM,PSES olaris10(SPARC,x86)11(SPARC,x86)64-bitC/ JNetworkHSM,PSEC/JNetworkHSM,PSEHP-UX116 4-bitC/JNetworkHSM,PSEC/JNetworkHSM, , , , , , , ,PSI- , : ModulesUnderTest: ModulesinProcess: CompletedValidations-VendorList: #11mechanism:CKM_AES_ECB_ENCRYPT_DATAR equiredThird-PartySoftwareYoumustinstall thefollowingthird- :OperatingsystemRequiredthird-partysoftw areWindows JavaRuntimeEnvironment(JRE) , , MicrosoftVisualC++(MSVC)2010redistributa bleruntimepackages.
4 ,AIX,HP-UX JavaRuntimeEnvironment(JRE) , , JavaRuntimeEnvironment(JRE) , (fromx4tox16), ,itwillbedetectedonstartup,butwon , , , :WhendeletinganFMfromtheHSMusingctfmd, :WhenSafeNetProtectServer/ProtectToolkit -CRuntimeisinstalledonUnixsystems, : , :WhencreatingkeysusingaPINpad, :BackuponsmartcardswithMofNandIncreasedS ecurityLevelfailswith"TemplateInconsiste nt" : :WhenregisteringCryptokilibrarywithKSP,a "Failedtoverifythesignatureforthechosenl ibrary" : : : :GeneratingcertificatewithctcertinFIPS moderesultsin"MechanismInvalid" : :WhencreatingkeyswithC_CreateObject, :DuringMofNbackupviaUSB, : : :WhenusingJProvwithacombinationoflegacyP SEandcurrentSafeNetProtectServerNetworkH SMsinWLD/HAmode,a"buffertoosmall" : :OnWindows,jcprovAPIdocumentationplacedi nthewrongdirectory, : "C:\ProgramFiles\SafeNet\ProtectToolkit5 \ProtectToolkitCSDK\jcprov_api\safenet\j cprov".PSR-1114 : :ET_HSM_NETCLIENT_CONNECT_TIMEOUT_SECS parameternotworkingasexpected; : : : :InactivemenubuttonsinSafeNetProtectServ er/ProtectToolkit-M' : :GUIissue-"Keysetpassword"labelnotfullyv isibleinSafeNetProtectServer/ProtectTool kit-M' : :Whensettingtheserialnumberofacertificat emadewithCKM_ENCODE_X_509, : ,contactTechnicalSupportusingthelistings below:ContactmethodContactAddressGemalto 4690 MillenniumDriveBelcamp,Maryland21017 USAP honeGlobal+ (86) (800)545-6608 ,getthelatestsoftwareupgrades.
