The BlackVault HSM.TAC is a rugged, compact, certified security module that meets the key security needs for a wide array of the tactical infrastructure use cases.
Public Key Cryptography for generating and protecting the public and private keys.
MAIN FUNCTIONS | ||||
|
|
|
HSM.TAC features:
- compact form factor,
- solid state construction,
- certified security architecture,
- smart card reader,
- tamper reactive silicon die shield,
- long battery life,
- software upgradable
- networked (remote management) and off-line operation with Ethernet and USB ports,
- MofN-Multifaktorauthentifizierung,
- Multiple Administrative Roles,
- Full Suite B Cryptography,
- Intrusion Tamper Reactive Hardware (Level 3+).
Applications
PKI | Code Singing | Certificate Authority (online and off-line) |
Document Singing | Database Encryption | IoT, Smart Card Issuance |
Benefits
Secure Keys in Tamper Reactive Hardware | Generate, Store, Backup and Decommission Keys |
Solid State Construction | Highly Secure Silicon Die Shield Crypto Boundary |
Expedite Regulatory Compliance Audits | Securely Transport Keys, Certificates, Signatures, etc. |
Single Platform has Network and USB Ports | Compact, Fits in Safe, Server Slot, Secure Room |
Integrated Multi-factor Authentication (Trust Path) | Multi-level Access Control |
Secure Audit Logging | Remote Management |
Technical Specification
Cryptography | Full Suite B support with Elliptic Curve Cryptography (ECC) |
Asymmetric: RSA (1024, 2048, 4096, 8192), Diffie-Hellman, DSA, Elliptic Curve Cryptography (ECDSA (NIST Curves: P-192, P-224, P-256, P-384, P-521, K-163, K-233, K-283, K-409, K-571, B-163, B-233, B-283, B-409, B-571), ECDH) |
|
Symmetric: AES 256 | |
Hash / Message Digest: SHA-1, SHA-2 (224, 256, 384, 512) | |
Hardware Random Number Generator: NIST SP 800-90 | |
Operating Systems | Windows, Linux, Ubuntu, CentOS, RedHat |
Virtual: VMware, Windows | |
Cryptographic APIs | PCKS#11, Java (JCE), Microsoft CAPI / CNG |
Host Connectivity | 10/100 Ethernet with Transport Layer Security (TLS) and Optional SFP |
Additional Connectivity | Integrated Smart Card Reader |
USB 2.0 | |
Management | Graphical User Interface |
Command Line Interface (CLI) | |
Syslog Logging | |
SNMPv3 Monitoring and Traps | |
Multi-level Access Control ("M of N") | |
Remote Management | |
Mounting | Desktop (Portable) |
19” rack mount (1U height) | |
Server Hard Drive Slot Embeddable | |
Physical | Dimensions: 4” x 6” x 1” (102 mm x 153 mm x 26 mm) |
Weight: 1 lb. (0.454 kg) | |
Power | Power Consumption: 4W |
Input Range: 5 to 30 VDC | |
Lockable DB9 Connector | |
AC adaptor included(order per country) | |
Redundancy | Optional Dual Power, Hot Standby |
Environmental | Operating Temperature: -20° to 60° C (-4° to 140° F) |
Storage Temperature: -20° to 60° C (-4° to 140° F) | |
Operating Humidity: Up to 90% (Non-Condensing) | |
Optional Extended Temperature Range Available | |
Certification | FIPS 140-2 Level 3 |
Regulatory | CE |
Safety: IEC 60950 | |
EMC: CFR 47 Part 15 Sub Part B: 2002, EN55022: 1994+A1&A2, EN55024, ICES-003 1997, CISPR22 Level A |