Features, Functions and Benefits

SCA4000 2.0
Off-loaded accelerated cryptographic functions.

New performance number are acieved with versions 1.1 (Solaris 8 and 9) and 2.0 (Solaris 10). The card accelerates SSL session establishment processes to up to 8,000 operations per second.

Speeds processing of secure transactions. Reduces dropped connections by handling more simultaneous connections. Helps optimize server usage for cost-effective capacity planning.

SCA4000 1.0
Off-loaded, accelerated cryptographic functions.

The PCI-based coprocessor board is designed to off-load IPsec and SSL cryptographic functions from the main system processor for the Solaris Operating System, the Sun ONE Web Server software, and Apache Web server software. This off-loading frees the host processor to complete primary tasks. The card accelerates SSL session establishment processes to up to 4300 operations per second (SSL performance may degrade when activating FIPS mode), and accelerates 3DES bulk data encryption to up to 10 times faster than on a system without hardware acceleration (Tests were done by encrypting 16 KB buffers using the Sun Crypto Accelerator 4000 board and software respectively on a Sun Fire 280R server with one 900-MHz Ultrasparc III Cu processor, achieving up to 800 Mbps throughput).

Speeds processing of secure transactions. Reduces dropped connections by handling more simultaneous connections. Helps optimize server usage for cost-effective capacity planning.

SCA4000 1.0
Integrated Gigabit Ethernet via a copper or fiber interface.

Integrated Gigabit Ethernet functionality provides high bandwidth for all data packets, whether encrypted or not.

Saves PCI slots on the server by enabling a single board to provide both high-performance network connectivity and cryptographic acceleration.

SCA4000 2.0
Shared Key keystore backup/restore operations.

Value-add feature to support centralized key management and automation.

Customers will be able to manage hundreds of private key, and migrate and recycle them in supoort of their security policies.

SCA4000 2.0
FIPS 140-2 level 3 verification.

Security tamper protection function provided by software and onboard coding.

To support government, financial services and defense security standards and requirements for crypto boards.

SCA4000 2.0
AES support (firmware implemented).

Support designed to support applications requiring sensitive AES keys versus 3DES.

Provides further bulk encryption security at higher speeds.

SCA4000 1.0
FIPS 140-2 Level 3 support for the Sun ONE Web Server software.

FIPS 140-2 Level 3 certification is a government standard that helps ensure high levels of security. The board is designed to meet FIPS 140-2 Level 3 certification requirements, with certification expected in August 2003.

Provides increased security assurance, which is of considerable importance in both the financial and government sectors.

SCA4000 1.0
On-board, tamper-proof key and certificate storage.

The board provides a common secure place to store and administer keys and certificates for the Sun ONE Web Server software. The board automatically erases on-board keys and certificates if tampering occurs.

Simplifies key and certificate administration. Increases protection for keys and certificates.

SCA4000 1.0
Hardware random number generator.

Random numbers are generated to encrypt data. A hardware random number generator provides true random numbers for stronger encryption.

Designed to enhance security through true randomness, which is a core component of encryption methodology, to deliver a higher degree of security.

SCA4000 1.0
Support for up to 2048-bit RSA encryption.

RSA encryption is one of the most widely used public key encryption algorithms on the market. RSA key lengths range from 512 bits to 2048 bits, depending on the level of security needed. The 2048-bit key offers some of the strongest level of RSA encryption available today.

Strengthens security measures.

SCA4000 2.0
Support for Solaris 10 Encryption Framework (EF).

The crypto boards will plug into the Solaris 10 provide an Encryption Framework (EF) module where application and other devices can plug in as well and leverage the use of the crypto acceleration.

Plug and play ease-of-use for crypto acceleration with third party applications through Sol 10 EF. Customers with third party implementations, ISV solutions, and other tehcnology vendors can take advantage of crypto acceleration and HSM funtions by creating an interface to the Solaris 10 EF. Java 1.5 is the product of choice to build such interfaces.

SCA4000 2.0
Predictive Self Healing.

The SCA4000 version 2.0 supports Sun's Predictive Self-Healing facilities. These facilities provide a common framework for reporting hardware and software problems. When problems are detected by the SCA4000 driver or firmware, error reports are sent to the Solaris Fault Management Daemon, fmd(1M). A fault diagnosis engine is then used to identify the problem and recommend an appropriate response.

The benefit of the Predictive Self-Healing framework is that it provides a common set of tools for reporting and diagnosing system problems. Having all system components report problems via the same framework simplifies diagnosis for customers and support personnel alike.

SCA4000 1.0
Compatibility with common hardware and software platforms.

The Sun Crypto Accelerator 4000 board supports the Solaris Operating System, the Sun ONE Web Server software, and Apache Web server software. In addition, the board is compatible with a wide range of Sun servers, from entry-level servers to high-end Sun Fire servers.

Helps enable a dramatic increase in secure transaction performance without a major investment in new server hardware or software.