Prerequisites

This installation guide explains how to set up the VaultCode runtime in a Primus HSM, by launching the VaultCode image within the VaultContainers subsystem. This subsystem can run Docker containers, including VaultCode and the TSB.

Running VaultCode inside your HSM is the production mode. Only when VaultCode runs inside an HSM, VaultCode can attest the runtime environment that executed your business logic.

To install VaultCode on your Primus HSM you need:

• A CyberVault Pro HSM or higher (X2-series) with firmware version 3.3 or higher.
• When using a Decanus to remotely manage the HSM: The Decanus requires firmware version 2.3.2 or higher.
• Licenses:
  • jce
  • rest_api
  • vault_code
  • Optionally (for SKA and Automated Approval): tsb_engine and key_auth