Luna PCIe HSM 7 Hardware Installation

This chapter describes how to install and connect a Luna PCIe HSM 7. To ensure a successful installation, perform the following tasks in the order indicated:

1.Before unpacking your new hardware, refer to Verifying the Integrity of Your Shipment for safe unpacking instructions.

2.Ensure that you have all of the required components, as listed in Luna PCIe HSM 7 Required Items

3.Install and connect the hardware, as described in Installing the Luna PCIe HSM 7 Hardware

4.The Luna PCIe HSM 7 uses a 3.6V non-rechargeable lithium battery to provide backup power to its memory. If you need to replace this battery, see Replacing the Luna PCIe HSM 7 Battery.

CAUTION!   This product uses semiconductors that can be damaged by electro-static discharge (ESD). When handling the device, avoid contact with exposed components, and always use an anti-static wrist strap connected to an earth ground. In rare cases, ESD can trigger a tamper or decommission event on the HSM. If this happens, all existing roles and cryptographic objects are deleted.

The Luna PCIe HSM 7 has been tested with a variety of representative systems/servers with compliant PCI express slots. If you encounter any issues when installing the Luna PCIe HSM 7 into a new server/host computer, first try a different PCI express slot. The design of certain motherboards or the associated BIOS may prevent proper communication with a Luna PCIe HSM 7. For example, certain PCI express physical slots are intended for use only with a video card or another specific type of hardware, and the Luna PCIe HSM 7 may not work correctly in these slots.

If you encounter further issues, please contact Thales Technical Support.

Server Compatibility

The Luna PCIe HSM 7 conforms to the PCIe 2.0 standard and requires a PCIe x4 or higher slot.

NOTE    Do not install the Luna PCIe HSM 7 into a slot reserved for a dedicated function, such as video. If you do, the host system might not boot successfully.

Compatibility Issue with Intel Ice Lake CPUs

The Luna PCIe HSM 7 conforms to the PCIe 2.0 standard and requires a PCIe x4 or higher slot. When installed in a server using an Intel Ice Lake CPU, the Luna PCIe HSM 7 7 might not boot up after a hot reboot of the server. This issue has been confirmed on Dell, HP, and Fujitsu servers. Please ensure that you install the Luna PCIe HSM 7 7 in a server with a newer (Rocket Lake, for example) or older (Cascade Lake, for example) CPU.

If you have the Luna PCIe HSM 7 installed in an Ice Lake server, no issues have been found using cold reboots (startup from shutdown). If you choose to use a remote server management system such as iDRAC, ensure that you have assessed the security risks associated with this deployment, and that the system is properly maintained (security patches applied).