Skip to main content

Enable Crypto4A

If your Crypto4A hardware security module (HSM) is ready for use you can enable it in DigiCert® Private CA.

Before you begin:

  • Make sure all day zero tasks for your HSM, like initial setup and hardening, are complete before you enable it. Review the HSM vendor's documentation for relevant instructions.

  • If the HSM already contains any keys make sure that you're using them for the intended purpose.

  • Remember that HSM partitioning may delete any existing keys stored in it.

  • Remember that enabling the HSM makes its keys available for certificate issuance and management.

To enable your Crypto4A HSM:

  1. In DigiCert Private CA, from the left main menu, select HSM, then select Crypto4A.

  2. Select the power button Power_button.png to enable Crypto4A HSM.

  3. Select Enable in the confirmation dialog box.

The Crypto4A HSM is enabled and you can see its server and partition details, if they're already configured.

About disabling Crypto4A

You can disable your HSM from the same screen. When you disable the HSM, the keys on it are no longer accessible to your private CA services.