Upgrade Not Possible
Older ePass 2003 tokens cannot be upgraded to CSP v3.0.
The upgrade path stops at CSP v2.0, and even that depends on the token's hardware compatibility.
For full compliance with the latest CCA guidelines, purchasing a new token is the only viable option.
Buy New Token
Older ePass 2003 tokens and the CCA rules
The CCA's Security Requirements for Crypto Devices have applied since 1 July 2018. Old ePass 2003 tokens on CSP version 1.0 can't be used to download new digital signature certificates, so they had to be updated to CSP 2.0.
-
The rules cover every token
They apply to all PKI tokens, including ePass 2003, ePass 2003 Auto, TrustKey, SafeNet, WatchData, mToken, Proxkey and Gemalto.
-
No upgrade to CSP 3.0
Older tokens can't be upgraded to CSP 3.0. The upgrade path stops at CSP 2.0, and even that depends on the token's hardware.
-
Upgrading wipes the token
An upgrade formats the token, so the digital signature certificate stored on it is removed.
-
A new token for full compliance
To meet the latest CCA guidelines in full, the only option is a new token.
Buy a new token
- Model
- HyperPKI ePass 2003 Auto HS series (HYP2003)
- Certification
- FIPS 140-3 Level 3, NIST certificate #5255
- Secure chip
- 32-bit smart card chip with its own operating system, 64 KB secure memory
- Connection
- USB 2.0 full speed, Type-A connector
- Algorithms
- RSA, ECDSA, AES, 3DES, SHA-1/256/384/512
- Interfaces
- PKCS#11 v2.20, Microsoft CAPI and CNG, Microsoft Smart Card Minidriver, PC/SC, CCID
- Protocols
- SSL v3, IPsec/IKE
- Operating systems
- Windows, macOS and Linux, 32 and 64-bit
- Serial number
- Laser-printed on every token
- In the box
- Token with protective cap
Why FIPS 140-3 validation matters
FIPS 140-3 is the current US government standard for cryptographic modules. It replaced FIPS 140-2, whose certificates have now moved to NIST's historical list. It covers ports and interfaces, authentication, physical security, key management and resistance to attack, at four increasing levels. Level 3 adds tamper resistance and identity-based authentication.
Validated products go through independent laboratory testing. This token's module is NIST certificate #5255, active until January 2031.