Forum Discussion

LuisPuma_134788's avatar
LuisPuma_134788
Icon for Altostratus rankAltostratus
Oct 01, 2013

F5 ADC+GTM already deployed, but need HSM

Hello all,   I am really in a trouble. Please, help me. I'll appreciate it.   I have already deployed a BIG IP 4000s ADC+GTM to get inbound/outbound load balancing and VPN SSL functionalities. ...
design
security
storage
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 01, 2013

The platform must be purchased with the hardware security module. It's part of the system hardware and cannot be upgraded after the fact. The FIPS HSM is also platform-specific, not module-specific. Further, because the FIPS HSM is managing the private keys used in SSL negotiations, this device should be in front of any other devices - it needs to be the one to terminate the SSL.