[Dnssec-deployment] SCA6000 users [Re: SUN SCA6000 FIPS 140 certification]

[Richard Lamb]

To be clear. I think the IBM cards are around $8K. 

> -----Original Message-----
> From: Jelte [mailto:jelte at isc.org]
> Sent: Monday, March 28, 2011 9:28 AM
> To: Richard Lamb; Ondřej Surý; dnssec-deployment at dnssec-deployment.org
> Subject: Re: [Dnssec-deployment] SCA6000 users [Re: SUN SCA6000 FIPS 140 certification]
> 
> I suspect price range here means the former price of the 6000, which i hear was around $1500
> 
> Richard Lamb <richard.lamb at icann.org> wrote:
> 
> >I have some tamper evident stickers, some microcontroller USB dongles.
> >Add $15K to pay Domus (the testing lab) and lets make our own level 3
> >HSMs  ;-).
> >
> >But seriously, for almost $10K why not buy the IBM 4764/5 level 4 HSM
> >that has better support.  I understand that it is just Linux inside and
> >a kit can be had to program its internals (RRSIG computer anyone?
> >anyone?...).
> >
> >-Rick
> >
> >Wish I could meet you guys in Prague.  I do think #1 is not as far
> >fetched as it may seem.  At the RSA meeting expo floor I spoke with at
> >least 5 vendors willing to provide me with a level 3 certified USB fob
> >/w PKCS11 support.  Sure these things could only do 10-100 sigs/s but
> >seems only a matter of time before someone familiar with the FIPS
> >certification process seeks the same for some much faster tin-wrapped
> >s/w /w tamper sensors.
> >
> >> >
> >> > I am unaware of any SCA6000 users' list
> >>
> >> The problem is that SCA6000 has been discontinued by Oracle :-(.
> >>
> 
> --
> Msg shrt. Snt frm phn. sry.