CSG

Centralized HSM management & monitoring

The CSG provides your business with an infrastructure which acts as a central control center for all your HSMs. The CSG helps ensure the very best in availability and performance of your HSMs. It will securely, transparently and efficiently distribute crypto tasks between all available HSMs, regardless of vendor.

The CSG’s central admin client allows administrators to more effectively and efficiently do their job. A maintenance operator can easily disable or add an HSM in a few clicks with zero downtime to the applications calling the CSG.

In addition to the management abilities given to operators, the CSG provides a detailed monitoring interface to distill the essential information needed to keep the infrastructure and HSMs in good standing. This data allows operators to not only monitor the status of the entire system but also the health and activity on individual HSMs.

Audit logging and compliance

CSG produces signed audit logs that capture every crypto operation and administrative changes performed by the system. In addition to making demonstrating compliance a breeze, this detailed data capture can also allow itemized billing of crypto usage.

Key management and key Usage

A fundamental part of using cryptography within any company is proper key management. At Cryptomathic we split this in two parts:

1. Key Management – Managing the actual lifecycle of keys: generation, import, export, etc.
2. Key Usage – Controlling who can use the key and how they can use it

For Key Management, CSG gets the help of its sister product CKMS which provides best-in-breed key management. More details on this can be found in the “How it works” section and on the CKMS product pages.

Once keys have been provisioned from CKMS, the CSG will control the usage of these keys through its policy file. As mentioned above, only permissions explicitly stated in the policy are allowed. This gives applications zero possibility to use keys they are not allowed or to use them in the wrong way. The CSG controls key usage for both general purpose crypto and specialized financial functionality. More details on these can be found on the Use Cases page.