Prerequisites
To install and use Securosys' Secret Engine plugin for HashiCorp Vault, you will need the following elements.
1. Hardware Security Module (HSM)
Depending on your security architecture, you will require the following products/licenses:
- Cloud
- On-premises
Securosys CloudHSM subscription:
With Multi-Authorization Workflow:
- Transaction Security Broker (TSB) Server as a Service Economy (ECO), or
- Transaction Security Broker (TSB) Server as a Service Sandbox (SBX)
Without Multi-Authorization Workflow:
- CloudHSM Economy (ECO) and CloudHSM RESTful API Economy (ECO), or
- CloudHSM Sandbox (SBX) and CloudHSM RESTful API Sandbox (SBX)
CloudHSM TSBaaS is included in CloudHSM Economy (ECO) or Sandbox (SBX) services.
With Multi-Authorization Workflow:
- Transaction Security Broker (TSB) Server Software License
- Securosys Primus HSM with:
- Attestation License
- Smart Key Attribute (SKA) License
Without Multi-Authorization Workflow:
- Transaction Security Broker (TSB) Server Software License
- Primus HSM with:
- Attestation License
2. Transaction Security Broker (TSB)
Ensure that Transaction Security Broker (TSB) is installed, configured and updated to version TSB Software v.1.18.0 or higher.
- Cloud
- On-premises
- Download Transaction Security Broker (TSB) Software (account required).
- How to install and configure TSB on-premises?
- Download TSB Software (account required).
Ensure that your Securosys Primus HSM is updated to Primus HSM Firmware v2.8.21, v2.11 or higher.
- Download the latest Securosys Primus HSM firmware (account required)
For the initial setup of your Securoys Primus HSM:
- please follow the procedures outlined in this section.
- Ensure that the settings align with the Transaction Security Broker (TSB) requirements specified in this section.
3. Docker Engine
To use Securosys's Secret Engin plugin for HashiCorp Vault, Docker Engine must be installed and running on your system. Install Docker Engine on:
In this guide, we will use Linux Ubuntu 22 (amd 64). For other operating systems and Linux distributions, please refer to the referenced guides.
Support Contacts
If you encounter a problem while installing/configuring the provider or integrating the HSM with the Securosys Secrets Engine plugin, make sure that you have read the referenced documentation. If you cannot resolve the issue, please contact Securosys Customer Support. For specific requests regarding Securosys Secrets Engine plugin, the Securosys Support Portal is reachable under link.