You have obtained the Hardware Appliance from Keyfactor.

In the following sections, you will find information about the scope of delivery as well as details about the Hardware Appliance device.

Scope of Delivery

The Hardware Appliance package contains the following items:

1 Quality Assurance Test ReportThe Hardware Appliance Test Report lists the quality checks that have been performed. It is signed by Keyfactor authorized personnel.
1 Packing List

1 Hardware Appliance

1 External Battery Adapter (standard 6LR61/9 Volt block battery is not supplied)
Pictures show the front and the back side.

1 Set of mounting rails with a mounting instruction and a set of screws

4 Mains cables, one pair each for European and American standard

1 Smart Card Reader with PIN pad and display
(optional) 10 smart cards

Overview - Front 

The following illustrates the front view of the Hardware Appliance.

  1. Four bays for customer serviceable hard disks, (Solid State Disks (SSD)) for database and RAID1.
    Two disks are provided, two bays are empty.
  2. SSD Slot 0
  3. SSD Slot 1
  4. SSD Slot 2, empty
  5. SSD Slot 3, empty
  6. Cooling vents:
    Do not obstruct the vents.
  7. Status LED row:
    Green: Power
    Red: Hard Disk
    Yellow: Info
  8. Front display for status information and IP address configuration messages
  9. Menu buttons to operate the front display:
    Up, Down, Enter, Cancel
  10. Front USB ports:
    The ports are suitable for PIN pad connection.
  11. Power button, ATX power supply

Overview - Back

The following illustrates the back view of the Hardware Appliance.

  1. Hardware Appliance serial number
  2. Two power supply units (PSU), redundant
  3. Mainboard serial connection, not operational
  4. Mainboard USB ports, suitable for PIN pad connection
  5. Application network interface (left) and Management network interface (right)
  6. Mainboard VGA connector, not required for operation
  7. Hardware Security Module (HSM)
    Do not use the USB port or the buttons!
  8. Connector for external battery and test automation

  9. Safeguarded External Erase button for Factory Reset
  10. Additional network interfaces, currently not activated

External Battery Adapter 

The following illustrates the external battery adapter of the Hardware Appliance.

Side to be plugged into the device

Side that holds the battery

External battery adapter with connected battery

Connected external battery adapter

The external battery adapter has the task to support the power supply of the HSM. The HSM always requires power, even when the Hardware Appliance has not been put into operation or is not supplied with power. The HSM's internal battery is not designed to be inactive for extended periods of time. To prevent the HSM from being fully discharged and thus placed in maintenance mode, use the external battery adapter to buffer the internal HSM battery and extend its lifetime when the Hardware Appliance is powered off. This is useful, for example, when a Hardware Appliance is operated as an offline (root) CA.

Preparation and Checks for Commissioning / Powering Up

Note the following when taking the Hardware Appliance into operation and powering it up.

  1. Make sure the seal at the right side of the Hardware Appliance is intact and has not been tampered.
  2. Make sure the serviceable hard disks are sitting properly in their bay.
  3. Make sure the PSUs sit properly.
  4. Connect the power cord.
  5. Connect the network cables.


    Both network cables must be plugged in and connected to the network before starting the Hardware Appliance.

  6. Provide the External Battery Adapter with batteries and connect it.

    The External Battery Adapter should already be fitted with a battery and running if the Hardware Appliance is not installed immediately upon delivery.


    It is important that the External Battery Adapter is constantly in operation.

  7. Power on the machine to start booting. Booting will take about 5 minutes.

    Default IP address

    The default IP addresses used by the Hardware Appliance are and If these IP addresses are already in use on your network, this will cause an IP address conflict.