Definition: Remote HSM management allows one or more users to manage and administer tasks, including applications, upgrading firmware and checking status, from any location, with around-the-clock visibility and access to the HSM.
Remote HSM Management explained
In today’s modern society, working remotely has become an integral part of how many organizations function. With this in mind, remote HSM management allows multiple security teams within an organization to perform tasks from a central remote location without having to travel to a physical location.
A remote HSM management solution reduces operational costs and provides flexibility for users. Remote HSM devices are unique in that they allow for both control and flexibility. Instead of using physical keys, strong and role based access control is based on digital credentials. To protect HSM management against tamper and fraud, HSM’s are subject to requirements and certification procedures which include Federal Information Processing Standardization (FIPS) 140, Common Criteria and the HSM requirements of the Payment Card Industry.
Remote operations bring additional challenges to management and system reliability. This leads to the necessity of measures such as continuous monitoring of system audit logs, bottlenecks, system health and general availability. Reliability can be improved through the avoidance of system inter-dependencies such as on HSM firmware.
Within this highly regulated payment card issuance and transaction space, this is particularly important - where the root of trust or HSMs that store the cryptographic keys are located. They may be located in multiple data centers and placed under restricted access. Therefore, a remote management solution would streamline all necessary processes whilst ensuring optimal levels of flexibility and security.
