Excrypt™ Guardian9000

An Added Layer of Protection That Continually Monitors & Updates Your HSM Network

  • Secure, remote, PKI-based key loading for Lights-Out datacenters
  • Real-time HSM network monitoring
  • Centralized HSM management and configuration
  • Customized alerting via SMTP, SNMP, and SMS

Have any questions?

Contact Us

Complete Peace of Mind Through Security, Speed, and Scalability

In today’s rapidly-changing security landscape, we know that your top priority remains to ensure the security of your sensitive data. The Excrypt™ Guardian9000 load balancing, disaster recovery, and remote configuration management device provides a complete and secure high availability solution for your encryption processing needs. From exhaustive PIN attack monitoring to remote, PKI-based loading of Master Keys, the Excrypt™ Guardian9000 is your all-in-one security solution that provides peace of mind for your HSM network.

Continuous HSM Monitoring and Load Balancing

One of the unique features of the Excrypt™ Guardian9000 is its ability to monitor when exhaustive PIN attacks are occurring and alert your HSM network administrator should such an attack occur. It also provides status update monitoring to ensure the operation and stability of your Excrypt™ System Security Processor (SSP) Series HSM.

The Excrypt™ Guardian9000 conducts diagnostic monitoring that observes your HSM units’ temperature, error messages, and battery life. SNMP support is also included and can automatically broadcast errors to a central network monitoring tool. Additional monitoring capabilities through SMTP and SMS ensure that your network administrators are able to be reached in critical situations.

Secure, Remote Updating and Configuration

Ensuring that you have the latest firmware updates for all your HSMs is a necessity in today’s security environment. With the Excrypt™ Guardian9000, you can now update all your HSMs from one centrally-located unit. The Excrypt™ Guardian9000 will also help you manage, configure, and remotely administer your HSM devices through its included secure management utility. In this same utility, the Guardian9000 can provide automatic "push" updates that will allow you to manage all critical device updates.

The Futurex Excrypt™ Guardian9000 will help give you the peace of mind you need, while at the same time providing unique features not found in other Hardware Security Module remote management platforms.

Ease of Use
  • Single point encryption key loading
  • Robust and versatile GUI makes configuration simplified and easy to understand
  • Seamlessly add a new Futurex Excrypt™ SSP Series Hardware Security Module to the network at any time
Remote Monitoring, Audit Logging, and Alerting
  • Remotely pull data logs for internal and external audits.
  • Generate detailed diagnostic and support reports
  • Simple Mail Transport Protocol (SMTP) and Short Message Service (SMS) allow you to be notified by email or mobile phone should any technical issues with the ExcryptTM Guardian9000 or a Futurex HSM arise
  • Simple Network Message Protocol (SNMP) automatically transmits error messages to a central network monitoring tool
Centralized HSM Management
  • Save time by managing your HSMs in groups under the control of the Excrypt™ Guardian9000
  • Serves as a centralized console for monitoring and modifying the Excrypt™ SSP Series device information
  • Securely distribute firmware updates to all Excrypt™ SSP Series units in a network
Disaster Recovery
  • Automatically synchronizes keys and device information across HSMs
  • Avoids loss of functioning in the event of a disaster or device failure
  • Communicates directly with other Guardian9000 units, allowing organizations to establish system-wide redundancy
Load Balancing
  • In the slim chance that one Excrypt™ SSP Series in your HSM group should fail, the Excrypt™ Guardian 9000 will help the other functioning Excrypt™ SSP Series HSMs take the load off the impaired unit
Scalability
  • Organize multiple Excrypt™ SSP Series HSMs into a single, functional group that will operate faster and more effectively
  • Manage up to five groups with up to five Excrypt™ SSP Series HSMs per group
  • Helps increase the overall functionality of your HSM network
Single-Point Key Loading and Device Configuration
 The Excrypt™ Guardian9000 allows organizations to establish a true Lights-Out environment for payment processing:
  • Establishes a Public Key Infrastructure (PKI) to securely and remotely load Master Keys
  • Replicate device configuration details across multiple units, reducing initial setup time
Advanced Hardware Features
 The Guardian9000 includes numerous advanced hardware features, including:
  • Integrated smart card and CompactFlash readers
  • Advanced cryptographic hardware based on Futurex’s EXP9000 encryption card
  • Dual, hot-swappable power supplies

Excrypt™ Guardian9000

Current Application Version
  • 1.0.12
Dimensions & Weight
  • Space: 2U
  • Weight: 37.1 lbs (16.83 kg)
Meets Industry Compliance Standards
  • Payment Card Industry (PCI)
  • FIPS 140-2 Level 3-compliant
  • ANSI X9.24 part 1 and part 2 — TR-39
Operating Conditions
  • Power requirements: 100 - 230 VAC 50/60 Hz. 400 Watts
  • Operating temperature: 50° to 95°F (10° to 35°C)
  • Storage temperature: -40° to 149°F (-40° to 65°C)
  • Operating relative humidity: 20% to 80% non-condensing
  • Storage relative humidity: 5% to 95% non-condensing
External Hardware Requirements
  • Keyboard: Standard USB
  • Mouse: Standard USB
  • Video: Standard SVGA1024x768 at 75Hz refresh
Excrypt™ Guardian9000 Unit Includes
  • Guardian9000 application CD
  • User guide
  • Mounting brackets
  • TRSM double barrel keys
  • Cables
Integrated Alert and Notification Formats
  • Simple Mail Transfer Protocol (SMTP)
  • Simple Network Management Protocol (SNMP)
  • Short Message Service (SMS)
HSM Connectivity
  • 8x Ethernet (10/100/1000)
Remote Management Capabilities
  • Master Key loading
  • User and permissions administration
  • Log management and audit reporting
  • Synchronization of keys and configuration details across HSMs
  • Firmware distribution and installation
Hardware Redundancy
  • Dual, redundant, hot-swappable power supplies
  • 8x Ethernet (10/100/1000) with automatic failover
  • Direct failover link with additional Guardian9000 units