topic R82.10 - Hardware Security Module (HSM) for TLS 1.3 in General Topics

R82.10 - Hardware Security Module (HSM) for TLS 1.3

HeikoAnkenbrand — Fri, 08 Aug 2025 09:10:49 GMT

R82.10 EA Program | Production

CUT>>>
HTTPS Inspection now supports Hardware Security Module (HSM) for TLS 1.3 decryption, which enables secure, high-performance decryption and inspection of encrypted traffic.
<<CUT

In your announcements for R82.10, you mention that HTTPS interception will leverage a "Hardware Security Module" (HSM). How does this work in practice?

Will there be new appliances that include this functionality, or will there be dedicated HSM modules or slots available?

Re: R82.10 - Hardware Security Module (HSM) for TLS 1.3

Chris_Atkinson — Fri, 08 Aug 2025 11:34:38 GMT

I believe it's simply TLS 1.3 support that is specifically new.

HSM support exists in previous versions otherwise i.e

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SecurityGateway_Guide/Content/Topics-FWG/HSM.htm

Description

Found in version

PMTR-103024,
CRYPTOIS-2197

HTTPS Inspection does not support Hardware Security Modules (HSM) when inspection of TLS 1.3 traffic is enabled. With HTTPS Inspection, you can enable only one of these features - TLS 1.3 or HSM.

R81