The inspection procedure is as follows:
1. Confirm that the serial number of the HSM, as stated on the label on the back of the unit, corresponds correctly with the delivery documentation originally provided with the unit.
2. Confirm that the identification numbers of the physical keys correspond correctly with the delivery documentation originally provided with the product.
3. Confirm that all physical keys associated with the HSM operate correctly.
4. Confirm that the HSM is not reporting any faults i.e. that the “FAULT” LED is not illuminated, either permanently or flashing.
5. Confirm that the operational mode of the HSM is as expected. This must include verification of the unit’s operating state (Authorised State, Secure State or User State), and the armed status (armed or unarmed).
6. Confirm that the HSM’s diagnostic test console DT command, as described in the HSM8000 Console Reference Manual, outputs the following, demonstrating correct basic operation of the unit:
Memory Test ... OK
Firmware Test ... OK
DES Test ... OK
Check Smart Card Eject (HSM successfully ejects Smart Card)
Cryptographic Test ... OK
DIAGNOSTICS COMPLETE
Note that use of the DT command requires the unit to be placed in off-line state.
7. Use the HSM's VR command, as described in the HSM8000 Console Reference Manual, to confirm that the version number reported corresponds correctly with the documentation provided by the customer.
8. Confirm that all cables connected to the HSM terminate at the expected location/equipment and that there are no signs of physical damage to the cables themselves.
9. Confirm that the unit has received no cosmetic damage.
10. Confirm that there are no signs of forcible entry on the unit e.g. evidence of drill-holes, damage to rivets, replacement (or part-replacement) of panels.