System Requirements
The production requirements below are the target. Nothing has been verified on a production HSM yet.
Runtime
| Component | Requirement |
|---|---|
| Java | Java 25 runtime. The service is packaged as a war; the Docker image uses the Wultra Semeru 25 base image. |
| Database | PostgreSQL. The schema is applied with the Liquibase CLI or the migration image, never by the application; see Database Setup. |
| HSM | A PKCS#11 module, loaded by the service process. ML-DSA keys need a PKCS#11 3.2 module. |
| PowerAuth Server | Reachable from the service for the envelope keys and the activation status of the user endpoints (target design). |
HSM
| Environment | HSM |
|---|---|
| Production | Thales Luna Network HSM 7 (target, not verified); see HSM Setup. |
| Development and tests | SoftHSM2 (2.6.1 in CI), with OpenSC and pkcs11-tools; see SoftHSM2 Development Setup. |
Development
The build needs JDK 25 and Maven 3.6.3 or newer; see Build and Test. The SoftHSM2 scripts need Python 3.9+ and OpenSSL 3.x.
Network
Proof of concept. Not for production use. The service does not authenticate callers yet, so run it only on an isolated network. All attestations and certificates it creates are for testing only.
Related Documentation
Last updated on Nov 11, 2026 (21:37)
Edit on Github
Send Feedback