Gemalto SafeNet KeySecure Technical Specifications

Hardware Specifications — Gemalto SafeNet KeySecure k460 Appliance
Rack-mountable EIA Standard 19 "(1U)

Height: 1.7 in
Width: 17.1 in without rack mounting brackets, 18.9 in with brackets
Depth: 27.4 in – includes handles and locking bezel.

Weight 42.5 lbs
Processor Intel Xeon E5-2420 1.9GHz, 15M cache
Serial Port Standard RS232 male DB9, pin out
Network Interfaces (Back Panel) 2 x 10/100/1000 Mbps Ethernet ports
PED Port (Back Panel) The PED port is used to connect the PIN entry device (PED) to the KeySecure
Hard Drive Two (2) x 500GB 7.2K RPM SATA 2.5”
Power Supply (Back Panel) Two (2) x 350GB 2W redundant
USB Ports 3
Input Power Ranger 100-240 VAC (4.8 A - 2.4 A)
Operating Ambient Temperature 50 to 95 °F / 10 to 35 °C

Supported Technologies (both models)
API Support KMIP 1.1, PKCS #11, JCE, MS-CAPI, ICAPI, and .NET
Network Management SNMP v1, v2c, and v3 SNMP (v1, v2, and v3), NTP, URL health check, signed secure logs & syslog, automatic log rotation, secured encryption and integrity checked backups and upgrades, extensive statistics
Authentication LDAP and Active Directory
Management Interfaces KeySecure Management Console: Graphical user interface (GUI) available via web browser that is capable of high-grade 128-bit encryption. JavaScript must be enabled to access all functionality available through the management console.
Command Line Interface (CLI): CLI available over SSH or directly through the serial console port.
Auditing and Login Cryptographically signed tracking of granular events. Configurable audit trail with local and remote (syslog) logging.
Supported Algorithms KeySecure supports the following public algorithms:
  • AES
  • ARIA
  • DES
  • DESede
  • HMAC-SHA256
  • HMAC-SHA384
  • HMAC-SHA512
  • RC4
  • RSA
  • SEED
Operating System Highly customized, hardened OS

Model Comparison
KeySecure k460 Virtual KeySecure k150v
Max Keys 1,000,000 25,000
Max Concurrent Clients 1,000 100
Redundant hot-swap HDs & Power Yes N/A
FIPS 140-2 Support Level 3 Level 1
Hardware Security Module (HSM) Integration* Yes Yes
Gemalto SafeNet Crypto Pack** Optional Optional
Gemalto SafeNet Third-Party Integration Support
  • NetApp® NSE
  • Amazon Web Services S3
  • Dell Compellent
  • DropBox
  • Google Cloud Storage and Google Drive
  • Hitachi VSP G1000, HUS-VM, and RAID700
  • HP MSL/ESL Tape Libraries, HP 3Par, HP XP7 9000
  • Nutanix
  • Quantum Scalar Series (i6000m, i500 & i40/i180)
  • Sepaton VTL
Partner Integration Support (requires ProtectApp)
  • CipherCloud
  • IBM QRadar
  • Perspecsys
  • PKware
  • Sepaton VTL
  • ServiceMesh
  • SkyHigh Secure
  • Viasat

[*] KeySecure will integrate with both Luna SA and Amazon CloudHSM