• Forums
    • Public Forums
      • Community Connect
      • Dynatrace
        • Dynatrace Open Q&A
      • Application Monitoring & UEM
        • AppMon & UEM Open Q&A
      • Network Application Monitoring
        • NAM Open Q&A
  • Home /
  • Public Forums /
  • Network Application Monitoring /
  • NAM Open Q&A /
avatar image
Question by Gary W. · Jun 04, 2015 at 08:51 AM ·

Limit to number of SSL keys?

 

We have nCipher nFast HSMs on AMDs and wonder if there is a limit to the number of SSL keys that either the card can hanlde or the AMD can handle?

Happens to be running 11.5 currently if that matters.

Thanks

Comment

People who like this

0 Show 0
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

6 Replies

  • Sort: 
  • Most voted
  • Newest
  • Oldest
avatar image

Answer by Chris V. · Jun 12, 2015 at 04:56 AM

An exact number isn't really possible. different key sizes will of course consume different amounts of space on the card.

I've a customer with a nCipher HSM and they have a 'couple hundred' (I'm not up to date on the exact number) keys loaded.

 

Comment

People who like this

0 Show 1 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image Gary W. · Jun 22, 2015 at 02:21 PM 0
Share

Thanks Chris - just what I was after.... more than enough space then (smile)

avatar image

Answer by Ulf T. · Jun 04, 2015 at 04:33 PM

Not sure - I've lost my login to Thales and the mental HD is blank (tongue)

If it's fairly new you should still be able to knock on their support door?

Comment

People who like this

0 Show 2 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image Gary W. · Jun 04, 2015 at 04:39 PM 0
Share

Well, HSMs were bought with the AMDs direct from Compuware as part of a bundle, so we've never had any dealiings with Thales.

As it's running 11.5, you can probably guess it's not new either!

I'm really after a ballpark figure - 100, 1000 etc as we need to do a tactical 'Add these new servers' before we can finally upgrade to latest DCRUM version! (A project kicking off as I type) 

I want to be reasonably confident that we can accomodate the extra servers which all have SSL 

avatar image Ulf T. Gary W. · Jun 04, 2015 at 04:52 PM 0
Share

So saying that - I guess the shipping bills are lost in time?

Then I see only 2 options:

  1. Boot and go into BIOS and see what it says.
  2. Pry the box open and read the print on the card.

If you have the ILO board activated that should potentially give you another way in. 

avatar image

Answer by Gary W. · Jun 04, 2015 at 02:18 PM

Hmmm...

42:02.0 Co-processor: Intel Corporation 21555 Non transparent PCI-to-PCI Bridge (rev 03)
Subsystem: Ncipher Corp Ltd Unknown device 0100
Flags: bus master, 66MHz, medium devsel, latency 8, IRQ 67
Memory at dfcf0000 (32-bit, non-prefetchable) [size=4K]
I/O ports at 4000 [size=256]
Memory at d9e00000 (32-bit, prefetchable) [size=1M]
Capabilities: [dc] Power Management version 2
Capabilities: [e4] Vital Product Data
Capabilities: [ec] #06 [0080]

Unknown Device.

 

Any of the nfast tools allow me to interrogate?

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image

Answer by Ulf T. · Jun 04, 2015 at 01:57 PM

This is where it's getting interesting (big grin) 

Do you mean you have no access to the AMD?

If you have you can probably run the LSPCI -v command or KUDZU -v and get the essentials.

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image

Answer by Gary W. · Jun 04, 2015 at 01:28 PM

Nice - of course it may help if we knew what model we have - any way of interrogating it and getting the answer I need?

Cheers

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image

Answer by Ulf T. · Jun 04, 2015 at 12:26 PM

Hi

There is of course a limit since the keys are stored but it differs from model to model.

You can check your specific model over at https://www.thales-esecurity.com/

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

How to get started

First steps in the forum
Read Community User Guide
Best practices of using forum

NAM 2019 SP5 is available


Check the RHEL support added in the latest NAM service pack.

Learn more

LIVE WEBINAR

"Performance Clinic - Monitoring as a Self Service with Dynatrace"


JANUARY 15, 3:00 PM GMT / 10:00 AM ET

Register here

Follow this Question

Answers Answers and Comments

2 People are following this question.

avatar image avatar image

Forum Tags

esm siebel Dynatrace Managed license nam probe wan citrix dna rest api configuration mq alerting NAM 2018 dashboard dcrumadvisory reports css nam universal decode database mobileapp RUM ads sap nam console scripting nam server sequence transactions nam 2019 upgrade
  • Forums
  • Public Forums
    • Community Connect
    • Dynatrace
      • Dynatrace Open Q&A
    • Application Monitoring & UEM
      • AppMon & UEM Open Q&A
    • Network Application Monitoring
      • NAM Open Q&A