Safenet Protectserver HSM check

Submit review Recommend Print Contact Owner Visit

Rating

2 votes

Favoured:

Current Version

Last Release Date

2013-05-03

Compatible With

Nagios 3.x
Nagios 4.x

Owner

Raymii

Website

raymii.org/s/software/Nagios_Plugin_to_check_a_Safenet_HSM.h

Download URL

raymii.org/s/software/Nagios_Plugin_to_check_a_Safenet_HSM.h...

License

GPL

Hits

29394

Meet The New Nagios Core Services Platform

Built on over 25 years of monitoring experience, the Nagios Core Services Platform provides insightful monitoring dashboards, time-saving monitoring wizards, and unmatched ease of use. Use it for free indefinitely.

Download Now

Monitoring Made Magically Better

Nagios Core on Overdrive
Powerful Monitoring Dashboards
Time-Saving Configuration Wizards
Open Source Powered Monitoring On Steroids
And So Much More!

This is a Nagios plugin to monitor a Safenet Protectserver HSM using the Safenet tools. It can also gather information about the device, like firmware and functional module information.

https://raymii.org/s/software/Nagios_Plugin_to_check_a_Safenet_HSM.html

Usage

usage: ./hsm.sh options

This script checks various safenet HSM things and outputs nagios style results.

OPTIONS:
-h Show this message
-t Check type: "battery", "RAM", "datetime", "eventlog", "initialized", "hsminfo", "fminfo"
-n HSM name for $ET_HSM_NETCLIENT_SERVERLIST.
-b ctcheck binary (default: /opt/PTK/bin/ctcheck)

CHECKS:
battery Show HSM Battery status, GOOD (ok) or LOW (crit)
ram HSM RAM, (ok) if 75% 85% used.
datetime Local HSM date/time, (crit) if different from host time, host should use ntp in same timezone.
eventlog (ok) if eventlog not full, (crit) if eventlog full.
initialized (ok) if initialized, (crit) if not. Documentation states that a FALSE could mean a tampered device.
hsminfo always (ok), returns general HSM info, model, version, firmware and such.
fminfo always (ok), returns Functional Module information.

Examples

user@host ~$ ./hsm.sh -n hsm-038 -t ram
OK: RAM Usage OK: 41% used, ( 10192256 total). HSM: hsm-038.
user@host ~$ ./hsm.sh -n hsm-038 -t datetime
OK: HSM: hsm-038 time is the same as local time: 15/04/2013 12:48.
user@host ~$ ./hsm.sh -n hsm-038 -t eventlog
OK: HSM: hsm-038 Event Log Count: 11
user@host ~$ ./hsm.sh -n hsm-038 -t initialized
OK: HSM: hsm-038 is initialized. All is well.
user@host ~$ ./hsm.sh -n hsm-038 -t hsminfo
OK: HSM: hsm-038; Serial Number:[...]; Model: [...]; Device Revision: F; Firmware Revision: [...]; Manufacturing Date: [...]; Device Batch: [...]; PTKC Revision: [...]; Slot Count: [...] Security Mode: [...]; Transport Mode:[...]; Event Log Count: 88.
user@host ~$ ./hsm.sh -n hsm-038 -t battery
OK: Battery status is good for HSM: hsm-038

Reviews (1)

Still working with ProtectToolkit 5.7.0

byhablutzel1, April 3, 2020

I just wanted to report that it is still working with ProtectToolkit 5.7.0.

Thanks for this excellent plugin.

Nagios, the Nagios logo, and Nagios graphics are the servicemarks, trademarks, or registered trademarks owned by Nagios Enterprises. All other servicemarks and trademarks are the property of their respective owner. The files and information on this site are the property of their respective owner(s). Nagios Enterprises makes no claims or warranties as to the fitness of any file or information on this website, for any purpose whatsoever. In fact, we officially disclaim all liability. We do, however, think these community contributions are pretty damn cool. Website Copyright © 2009-2025 Nagios Enterprises, LLC. All rights reserved.