Processes and communication in a.sign RK HSM

The figure below shows all processes and their communication with each other. The outer grey area represents the server, the blue boxes the individual processes.

Description of the processes

nginx:	nginx (https://nginx.org/en/) is an HTTP server and reverse proxy, which serves as external interface of the server. Any communication from outside is sent to nginx, which forwards the requests to the appropriate internal systems.
ATrustHsmWeb:	Website for managing certificates and keys of the HSM.
ATrustHsmApi:	REST-API interface for accessing the certificates and key of the a.sign RK HSM. A description of the interface is provided in a.sign RK HSM Developer Manual.
ATrustHsmServer:	Server for internal key management and signatures, interface to the HSM hardware.
HsmKeystoreWatcher:	Service for synchronization of multiple redundant a.sign RK
HSM servers.
PKCS#11 & PCI-Card:	Drivers and hardware components of the HSM.
ATrustLogService:	Receives log-lines from all services.

Basic data about the processes

manage services

start:

systemctl start name

status:

systemctl status name

stop:

systemctl stop name

important log directories

ATrust Services:

/var/log/atrust/

nginx:

/var/log/nginx/