EtherTrust

Test


TLS-SE Live Demo

Connect to a real Secure Element through the EtherTrust Personal Network HSM (pNHSM). Explore hardware-protected cryptographic services over TLS 1.3 Pre-Shared Key (PSK) connections. Secure Element is a TLS-PSK end server, identified by a Server Name Indication (SNI). A TLS Front Server provides TCP/IP connectivity and routes traffic to the selected device.

1. Select a Secure Element

Choose an available SNI, or let the system allocate one pseudo-randomly from the administrator-defined pool.

2. Reserve Your Session

Reserve the selected Secure Element for the configured session duration.

3. Explore the KMS

Send text commands and get responses from the Secure Element’s embedded Key Management System.

Interactive TLS-SE Console

Select a Secure Element, reserve it, then send a command. You can begin with ?00 to read the KMS software version.

Here is a command quick guide TLS-SE 3.05 Shell specification is there

EtherTrust TLS-SE Demo

Choose a Secure Element, or let the system select a free SNI pseudorandomly. The session has a strict maximum of 3 minutes from reservation. Idle reservations expire after 3 minutes.

TLS 1.3 PSK · P-256 · TLS_AES_128_CCM_SHA256 · 16 Secure Elements available for allocation · Default SNI: key7.com

No Secure Element reserved.

Ready.

No output yet.

Every KMS command is permitted; the Secure Element enforces its own permissions. Commands are sent as printable ASCII followed by CRLF; one TLS connection is created per command. Some commands may modify or delete keys. The PSK is not sent to browsers.

Quick Example

  • c10 Clear Key 0 on curve SECP256r1 (prime curve).
  • g10 Generate Key 0.
  • p10 Read Public Key 0.
  • r10 Read private Key 0.
  • s10 <hexa value> Sign with Key 0 an hexadecimal value up to 64 digits (32 bytes), for example s10DECA1234

Secure elements use guest account with pre-shared-key.