HSM Status Checking.
No command
Up until recently if a customer
wished to online check the availability of the HSM before sending
live command data there were only two methods.
1: Either the NC command could be sent, which would return the
LMK check value and, if the HSM was a RG7000 series unit, the
firmware number, or
2: any other single command that did not use the DES chip, such
as the RA command, could be used.
The problem with using the RA command was that it could only
be used if the HSM was not being used in the authorised state.
Otherwise it would revoke authorisation and any commands to follow
that required this condition would fail, however this was a fast
and reliable way of proving that a command could be sent to the
HSM and a response returned.
A new command has now been provided in firmware base release
5.04 and above. This is the NO command and is specifically designed
to check status. It is predominantly being used in the Model 6.0
HSMs but is now being incorporated in customised firmware. It
will return the following:
1: I/O buffer size.
2: If the HSM is Ethernet, the type of connection (TCP or UDP),
and number of TCP sockets configured.
3: The firmware number.
4: A numerical value to indicate if there is a DSP module fitted.
5: If the Value for 4: above is 1, (DSP fitted), the DSP firmware
number.
|