R82.10 - Hardware Security Module (HSM) for TLS 1.3

[HeikoAnkenbrand]

R82.10 EA Program | Production 

CUT>>>
HTTPS Inspection now supports Hardware Security Module (HSM) for TLS 1.3 decryption, which enables secure, high-performance decryption and inspection of encrypted traffic.
<<CUT

In your announcements for R82.10, you mention that HTTPS interception will leverage a "Hardware Security Module" (HSM). How does this work in practice?

Will there be new appliances that include this functionality, or will there be dedicated HSM modules or slots available?

[Chris_Atkinson]

I believe it's simply TLS 1.3 support that is specifically new.

HSM support exists in previous versions otherwise i.e

 https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SecurityGateway_Guide/Content/Topi...

ID

Description

Found in version

PMTR-103024, CRYPTOIS-2197

HTTPS Inspection does not support Hardware Security Modules (HSM) when inspection of TLS 1.3 traffic is enabled. With HTTPS Inspection, you can enable only one of these features - TLS 1.3 or HSM.

R81