Skip to main content

How to retrieve the HSM Credentials?

This guide applies to both CloudHSM:

  • Dedicated
  • Shared, with a single partition

Download the HSM Service Credentials​

The provisioning of the HSM credentials must be performed by the privileged support user and include the following steps:

  1. Check your mailbox and look for one (or more) email with a SecureSafe link.
  2. Check your text messages on your mobile phone and look for one (ore more) password(s) (SecureCode).
  3. Use the password to download the HSM Service Credentials file(s) from SecureSafe.

CloudHSM Service Credentials Provisioning

Description of the Service Credentials​

You will receive one or two sets of credentials depending on your subcription type:

  • HSM Standard
  • HSM with Multi-Tenant TSBaaS

You will receive 2 sets of credentials, in 2 separate emails:

  1. Service User credentials
  2. Technical User credentials

Both credentials apply to CloudHSM Sandbox (SBX), Economy (ECO), Certified (ECO-CC) and Platinum subscriptions.

1. What are the Service User Credentials?​

The Service-User credentials are used to authenticate the CloudHSM subscriber on the service level. After successful authentication, the network gateway proxy permits the session to pass through to the HSM cluster.

The Service-User credential file contains the name and password to authenticate with reverse proxies.

<company>_<svc>_service_<user>_<date>.txt
Service User Name: ...              # Reverse proxy Service-User name
Service User Password: ...          # Reverse proxy Service-User password
HSM User Name: ...                  # Reference to HSM user/partition name
info

During step 5: Setup API Provider, the Service-User credentials are referred to as "Proxy-User"/"Proxy-Password".

2. What are the Technical User Credentials?​

The Technical-User credentials are used when connecting for the first time with your HSM cluster partition. This setup password will be disposed of and replaced with a user secret.

The user secret will never be revealed on display.

info

During step 5: Setup API Provider, the Technical-User credentials are referred to as "HSM-User"/"HSM-Password".

The Technical-User credential file contains the name and setup password to access the HSM partition and PKCS#11 secret:

<company>_<svc>_hsm_<user>_<date>.txt
HSM User Name: ...                  # HSM user/partition name
HSM User Setup Password: ...        # HSM user/partition initial password
PKCS#11 password : ...              # if PKCS#11 API ordered
Limited lifetime

The Technical-User HSM Setup Password has a limited lifetime of 7 days:

  • from the first usage, for CloudHSM Economy (ECO), Sandbox (SBX) and Platinum
  • from the date of issuance, for CloudHSM Economy Certified (ECO-CC)

If you are not able to setup your application and connect to the HSM cluster within that time, please create a support ticket to renew the HSM Setup Password.

Continue with the step 4: Setup the API Provider.

need help ?

Check the troublehsooting section or contact our support team for further assistance: