Overview

The Hardware Security Module (HSM) is the security device that contains your critical SWIFTNet Public Key Infrastructure (PKI) certificates and that generates signatures for your traffic. The use of HSMs is mandatory for all FIN, InterAct, and FileAct live traffic.

Strong protection

HSMs allow securing the generation, storage and use of cryptographic keys by providing logical and physical protection against unauthorised access. This device significantly increases your security compared to disk-based certificates because:

• the private key and the digital signatures are generated inside the HSM
• the private key is stored encrypted inside the HSM

Tailored options

There are three HSM’s models to address different customers’ needs: HSM tokens, HSM cards and HSM boxes.

• The HSM tokens and HSM cards are tailored for our low volumes customers who manage a limited number of certificates. These types of HSM’s models offer ease of use and portability.
• The HSM boxes are network-sharable and offer scalability and resilience. They are available with three different throughput to address the needs of our low, medium and high volumes customers respectively.

Integrated solution

The installation and the configuration of HSMs is embedded in the SWIFTNet Link. The SWIFTNet Link triggers the signing operations on the HSM and monitors the correct functioning of the HSM.