HARDWARE SECURITY MODULE FIRMWARE UPDATE

Abstract

A non-transitory machine-readable medium having machine-readable instructions including a firmware generator, the machine-readable instructions for the firmware generator being executable by a processor core to perform operations including signing a firmware image for a hardware security module (HSM) with a private key of a public private key pair to provide a first signature and augmenting the firmware image with a header that includes the first signature to provide an augmented firmware image. The operations further include encrypting the augmented firmware image with a symmetric key to provide an encrypted augmented firmware image. Furthermore, the operations include signing the encrypted augmented firmware image with the private key to provide a second signature and augmenting the encrypted augmented firmware image with the second signature to provide a firmware package for the HSM.

CPC Classifications