How to protect the Secure Login Server CA keys / HSM Support?

[Former Member]

Hi all,

appreciate if you could help me with this topic. Is there a way to support HSMs for SLS key generation? Are there best practice guides about how to protect the SLS-UserCA in a best way? Maybe there are existing guides dealing with this issues. Thanks a lot.

Carsten

[Former Member · Accepted solution]

Hello,

Secure Login Server supports HSM for User CAs since 2.0 SP03.
The User CA keys must be pre-generated by the HSM with the delivered HSM tools.

For Configuration and dependencies to the CommonCryptoLib please take a look in the Secure Login Implementation guide chapter 5.7.5.

best regards

Alexander Gimbel

[Former Member · Accepted solution]

Thanks. I have seen that already, but it is very roughly documented. I wasn't able to find a list of supported HSMs on the PAM. Do you have more information about this?

[Former Member · Accepted solution]

Hi Mr Colt,

Please check the SAP note 1884870 Secure Login Server 2.0 HSM Configuration for more information.

KR

Valerie