How do I know if I have an HSM1 or HSM2

Nitrokeys Misc
1

I have 5 HSMs but I’m not sure if they are HSM1 or HSM2. Is there an easy way to tell?

I suspect I have HSM1 because my firmware version is 2.5 and ‘pki as a service’ says I’m up-to-date. Also, when I list the mechanisms available, I don’t see any AES (I don’t think HSM1 supported AES). However, my RSA certs can go to 4096 and I thought that was an HSM2 feature.

Anyways, I’m not sure what I have so I’m hoping there’s an easy to check.

2

HSM1 has firmware 2.5 (older variant on JCOP 2.4.1r3) or 2.6 (newer variant on JCOP 2.4.2r3). HSM2 has firmware 3.4 in JCOP 3.

1 Like