Securosys CloudHSM
CloudHSM connectivity details cover Securosys product line - as a Service general connectivity:
- CloudHSM - HSMaaS connectivity details
- CloudHSM - TSBaaS connectivity details
In some occasions, Securosys CloudHSM may be referred to as CloudsHSM (old naming convention). If not specified otherwise, please use the parameters shown in the documentation.
CloudHSM - HSMaaS
The exact CloudHSM connectivity details are usually communicated with the onboarding procedure depending on your service. The details are included in the Welcome Support Ticket.
For the CloudHSM services, the following network configuration parameters for the API provider setup must be used:
| CloudHSM Cluster | Hostname | TCP Port JCE/JCA | TCP Port PKCS#11 | TCP Port MS CNG | TCP Port Partition Admin | Proxy (Credentials) |
|---|---|---|---|---|---|---|
| CloudHSM CH (Switzerland) | ch02-api.cloudshsm.com Legacy: a-api.cloudshsm.com b-api.cloudshsm.com | |||||
| CloudHSM DE (Germany) | ch02-api.cloudshsm.com | |||||
| CloudHSM US (US East, US West) | us02-api.cloudshsm.com | |||||
| CloudHSM SG (Singapore) | ||||||
| HSMaaS Global (DE, US, SG) | us01-api.cloudshsm.com us02-api.cloudshsm.com sg01-api.cloudshsm.com |
The hostnames depend on the assigned cluster.
For accurate redundancy and failover, the API Provider configuration must include all listed URLs.
CloudHSM - TSBaaS
The RestAPI as a Service is composed of Hardware Security Modules (HSM) in a high availability cluster configuration.
Please use one of the below parameters to connect to your service.
| TSB Service | Description | Authentication | Swagger-UI | API-Endpoint |
|---|---|---|---|---|
| Demo | Demo, open for everyone | None | Launch | tsb-demo.cloudshsm.com/v1/ |
| Pre-Prod/Test & Integration (SBX) | TSB bound to CloudHSM SBX partition, stable system, non-production | JWT | Launch | sbx-rest-api.cloudshsm.com/v1/ |
| Production (ECO) | TSB bound to CloudHSM ECO partition, production | JWT | Launch | rest-api.cloudshsm.com/v1/ |