---
title: Adding a Safenet Luna provider
description: Add a Safenet Luna provider to begin using hardware security module (HSM)-stored key pairs in PingAccess.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_adding_a_safenet_luna_provider
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/pingaccess_user_interface_reference_guide/pa_adding_a_safenet_luna_provider.html
revdate: February 6, 2023
section_ids:
  before-you-begin: Before you begin
  steps: Steps
---

# Adding a Safenet Luna provider

Add a Safenet Luna provider to begin using hardware security module (HSM) *(tooltip: \<div class="paragraph">
\<p>A dedicated cryptographic processor designed to manage and protect digital keys. HSMs act as trust anchors that protect the cryptographic key lifecycle by securely managing, processing, and storing cryptographic keys inside a hardened, tamper-resistant device.\</p>
\</div>)*-stored key pairs in PingAccess.

## Before you begin

* Configure your hardware security module.

* Configure a Luna client on the PingAccess system. The PingAccess service must have full permissions over the client.

* Move the `/usr/safenet/lunaclient/lib/libCryptoki2_64.so` library on Linux systems, or the `\Program Files\SafeNet\LunaClient\win32\cryptoki.dll` library on Windows systems, to the `deploy` directory on the PingAccess system.

## Steps

1. Click **Security**, then go to **HSM Providers**.

2. Click **[icon: plus, set=fa]Add HSM Provider**.

3. In the **Name** field, enter a name for the HSM provider.

4. From the **Type** list, select **Safenet Luna Provider**.

5. In the **Slot ID** field, enter the slot ID of the HSM slot to use.

6. In the **Library** field, enter the name of the library you copied from the Luna client to the `deploy` directory.

7. In the **Password** field, enter a password for connecting to the HSM provider.

8. Click **Save**.

9. Restart PingAccess.