Skip to content

Logical Interfaces

The relationships between the logical interfaces and the physical ports of Dinamo are described in the table below.

Logical Interface Description Physical port
Data Input Data that can be entered into the HSM. LAN1, LAN2, Keyboard, Smart card reader
Data Output Data that can come out of HSM. LAN1, LAN2
Control Control commands, signals and data for the HSM. LAN1, LAN2, Keyboard, Power button
State Status information, signals, logical and physical indicators of the HSM. LAN1, LAN2, Keyboard, LEDs

Each interface carries a specific type of data; the following describes the data transmitted through each interface.

Data entry

  1. data in clear text to be encrypted and/or signed by the HSM (via physical network port and using API)
  2. encrypted data to be deciphered and/or verified by the HSM (via physical network port and using API)
  3. cryptographic keys in plaintext and encrypted, and corresponding attributes (initialization vectors, size, permissions, exportable, temporary), (via physical network port and using API)
  4. encrypted authentication data for users and operators (passwords), using the physical network port, (via physical network port and using API)
  5. operator authentication data in plaintext (PIN), using the physical keyboard port
  6. seed for generating the Server master Key in plaintext via physical keyboard port
  7. Server master Key in plaintext via smart card reader port
  8. encrypted HSM database and PCS for backup restoration (via physical network port and using API)
  9. plain text information about HSM users/operators

Data output

  1. plaintext data that has been decrypted and/or signed by the HSM (via physical network port and using API)
  2. encrypted data that has been encrypted and/or verified by the HSM (via physical network port and using API)
  3. cryptographic keys in plaintext and encrypted (only when exportable), and corresponding attributes (initialization vectors, size, permissions, exportable, temporary) (via physical network port and using API)
  4. encrypted HSM database and PCS for backup generation (via physical network port and using API)
  5. plain text information about HSM users/operators, except password.

Control input

  1. power button
  2. logical command input for the control API (via physical network port and using API)
  3. manual command input via physical keyboard port (activation, deactivation, shutdown, reset, network configurations)

Status output

  1. status API (library) return code, via physical network port
  2. HSM logical states (via API on physical network port and via monitor port)
  3. on/off state (power LED)
  4. power supply status (status LED)
  5. Activity on physical network port 1 (front and rear LAN1 LED)
  6. Activity on physical network port 2 (front and rear LAN2 LED)
  7. Power supply on/off status (rear LED)
  8. HSM resource consumption status (memory and CPU)