Skip to main content

Prerequisites

HSM integration guide​

Before starting the process of integrating the Securosys CloudHSM or on-premises Primus HSM with CyberArk Privileged Access Manager – Self-Hosted, please make sure to fulfill all the necessary requirements listed below:

  • Existing CyberArk Primary-DR environment.
  • Securosys PKCS#11 Provider v1.8.6 or newer
  • Securosys CloudHSM Service (HSM as a Service) or
    Securosys Primus HSM, firmware v2.8.21, v2.10.5 or newer
    with PKCS#11 API and Session Object support enabled.

Installing CyberArk Privileged Access Manager​

This guide assumes that CyberArk PAM is already downloaded and installed.

  • Successfully executed CyberArk Primary-DR environment pre-install tasks for using the Securosys HSM,
  • The recovery private key (recprv.key) must be available. The recovery private key is used when a key to a Safe, encrypted with an external key, is forgotten.

Please consult the CyberArk Privileged Access Manager for more details on the installation and configuration of CyberArk PAM.

HSM Setup and Configuration​

API Provider

Ensure the PCKS#11 API is included and activated in you subscription.

Securosys CloudHSM is pre-configured and allows instant HSM operation for CyberArk Digital Vault:

Securosys CloudHSM is a Hardware Security Module (HSM) available as cloud service, without having to worry about time consuming things like evaluation, setup, operation, redundancy, and maintenance of the HSM in-frastructure, and is scalable according to your needs. The redundant cluster architecture, providing different redundant regions up to redundant world-wide cluster, fits perfectly in CyberArk’s Vaulting Technology®.