Network HSM Product Versions
Refer to ActivID CMS System Environment for the list of supported Thales (formerly Gemalto) SafeNet Network / Thales TCT (formerly SafeNet AT) Luna SA HSMs.
PKI key escrow/recovery requires specific Thales SafeNet / Thales TCT Luna models that support Key Export (KE), also referred to as Cloning Key Export (CKE). By default, Thales SafeNet / Thales TCT Luna HSMs do not support KE. Make sure to order a Thales SafeNet / Thales TCT Luna HSM model that supports KE/CKE.
Two models of these HSMs exist on the market: Trusted Path Authentication with PED (PIN Entry Device) or Password Authentication without PED.
Thales SafeNet PED PIN Entry Device
