Introduction

This document describes how to integrate the Delinea Platform with the AWS Key Management Service (KMS) External Key Store (XKS) supported by the Entrust nShield Hardware Security Module (HSM).

Product configurations

Entrust has successfully tested nShield HSM integration with the Delinea Platform.

For a list of supported nShield Security World Software versions and nShield HSMs, including firmware and images, refer to the Amazon Web Services KMS External Key Store (XKS): nShield® HSM Integration Guide, available at https://nshielddocs.entrust.com/.

Requirements

  • Access to Delinea Platform from your Delinea sales representative.

  • Access to the Entrust TrustedCare Portal.

  • Access to an AWS XKS (External Key Store) supported by the Entrust nShield Hardware Security Module (HSM).

Familiarize yourself with the nShield Documentation.

  • The importance of a correct quorum for the Administrator Card Set (ACS).

  • Whether your Security World must comply with FIPS 140 Level 3 or Common Criteria standards. For more information, see FIPS 140 Level 3 compliance.

  • Whether to instantiate the Security World as recoverable or not.