Prerequisites
To use the Securosys Authorization App, you need:
- A Securosys HSM. Either an on-premise Primus HSM or a CloudHSM.
- A Transaction Security Broker (TSB).
- The following licensed features:
REST_APITSB_ENGINEKEY_AUTHandEXTENDED_KEY_ATTRIBUTESROOT_KEY_STORE
All of the above need to be configured before your users can get started with the Authorization App. The configuration differs depending on which HSM setup you are using.
Get an HSM
- CloudHSM
- On-premise
CloudHSM is a hosted offering from Securosys, where Securosys manages the HSMs for you in a geo-redundant cluster.
Contact the Securosys Sales team to purchase a Primus HSM. There are various models available.
Your Primus HSM needs to be configured as described in the TSB installation guide.
Additionally, you need to enable the following parameters in your Partition Security Config:
- Key Export
- Key Extract
Get a Transaction Security Broker
- CloudHSM
- On-premise
CloudHSM offers TSB-as-a-service. Depending on the service package, the TSB option may be included or may need to be manually enabled.
Follow the TSB documentation to install and configure the TSB on your infrastructure.
Create approvers
Lastly, you need to create Approvers for the Securosys Authorization App users.
Follow the "Create Approver" tutorial for all desired users.
More approver management tasks are described in the tutorials.
Next steps
Now that you have an HSM and a TSB, and have configured your approver accounts, your users are ready to install the Authorization App and onboard as Approvers.