Network HSM Overview

About the FIPS Network HSM

For information on setting up and managing keys for network hardware security modules (HSMs) that are supported with BIG-IP systems, see the guide for your specific network HSM:

• BIG-IP System and SafeNet Luna SA HSM: Implementation

• BIG-IP System and nCipher HSM: Implementation

  Note: The Thales HSM name has changed to nCipher HSM

• BIG-IP System and Network HSM: Implementation

  Note: This guide includes these network HSM vendors:

  • Amazon CloudHSM
  • Equinix SmartKey HSM
  • SafeNet Data Protection on Demand (DPoD) HSM
  • Atos (Bull Trustway Proteccio) HSM

About using with Platform FIPS, VE FIPS, or Embedded HSM systems

If the Network FIPS add-on license is combined with a Platform FIPS or VE FIPS add-on license, you need to decide which location to use to store your keys based on the certificate and SSL Policy. You would need to set up and administer the network HSM using the instructions for your specific network HSM. For keys not stored in the Network HSM, see the key information for the Platform FIPS or VE FIPS.

The Network FIPS add-on license should not be used on an Embedded FIPS system.