The Swissbit Cloud TSE essentially consists of two components:
- SMAERS (Security Module Application for Electronic Record Keeping Systems).
- CSP (Cryptographic Service Provider)
SMAERS
The SMAERS components of the TSE (Technical Security Device) is responsible for processing the data to be secured and communicates directly with the CSP. The SMAERS component is also referred to as the "swissbit fiscal cloud connector - SFCC".
Operational environment protection
Important in connection with SMAERS, is the protection of the operational envirnoment: the SMAERS component is obliged to run "near the recording system". Put simply: the SMAERS must run where the actual cash register runs. This could be the cash register computer or, for example, the branch/store server. The connection between the cash register and the SMAERS must not exceed LAN.
The protection concept of the operational environment is intended to prevent any manipulation of the SFCC by the cash register operator and is required by the BSI.
Three elements are important for protection of the operational environment when using local POSes in stores:
- The operating system used - see below
- Hard disk encryption - except for the boot sector, the hard disks on which the SMAERS component runs must be encrypted. Communication takes place via TPM 2.0
- Access protection - the administration rights must not lie with the taxpayer company (=user).
The provider of the TSE is essentially responsible for the environmental protection.
You will find more information on the topic in the article Operational environment protection.
CSP
The CSP component signs the data transmitted by the SMAERS component.
Operating Systems
The Swissbit Cloud TSE can currently be used under the following operating systems.
| operating system | version | architecture | certification |
| Linux | |||
| RHEL | 6 | x86/x64 | n.s. / n.c. |
| RHEL | 7 | x86 | n.s. |
| RHEL | 7 | x64 | certified |
| RHEL | 8 | x86 | n.s. |
| RHEL | 8 | x64 | certified |
| CentOS | 7 | x86/x64 | certified |
| CentOS | 8 | x86 | n.s. |
| CentOS | 8 | x64 | certified |
| Oracle Linux | 6 | x86/x64 | certified / eso |
| Oracle Linux | 7 | x86 | n.s. |
| Oracle Linux | 7 | x64 | in cert. |
| Ubuntu | LTS 14.04 | x86/x64 | n.s. / eol |
| Ubuntu | LTS 16.04 | x86/x64 | n.s. / n.c. |
| Ubuntu | LTS 18.04 | x86/x64 | certified |
| Ubuntu | LTS 20.04 | x86/x64 | certified |
| Ubuntu | LTS 20.04 | aarch32hf/aarch64 | in cert. |
| Debian | 8 | x86/x64 | n.s. / eol |
| Debian | 9 | x86/x64 | certified |
| Alpine Linux | 3.12 | x86/x64 | c.soon |
| Linux (other distributions, like ARM) | glibc v2.5+ | x86/x64 ARM 64-bit ARM 32-bit SF&HF ARMv5/v6/v7/v8 | c.soon |
| Linux Server | |||
| SLES | 11SP3+LTSS | x86/x64 | n.s. / eol |
| SLES | 12 | x86 | n.s. |
| SLES | 12 | x64 | certified |
| SLES | 15 | x86 | n.s. |
| SLES | 15 | x64 | certified |
| Windows | |||
| Windows | 7 | x86/x64 | n.s. / eol |
| Windows | POSReady 7 | x86 | n.s. |
| Windows | POSReady 7 | x64 | certified |
| Windows | 8 Pro | x86/x64 | certified |
| Windows | 8.1 Pro | x86/x64 | certified |
| Windows | 10 | x86/x64 | certified |
| Windows | 11 | x86/x64 | |
| Windows Server | |||
| Windows Server | 2008 R2 | x86/x64 | n.s. / eol |
| Windows Server | 2012 | x64 | certified |
| Windows Server | 2012 R2 | x64 | certified |
| Windows Server | 2016 | x64 | certified |
| Windows Server | 2019 | x64 | certified |
| macOS | |||
| macOS | v10.14+ | x64 | c.soon |
Legend:
certified ... Cloud TSE certified successfully on the respective OS
in cert. ... certification of Cloud TSE on the respective OS in progress, test successfull
c.soon ... coming soon / certification planned
eso ... extended support only
eol ... end of life - usage of Cloud TSE in combination with the respective OS forbidden by BSI
n.c. ... not certifiable acc. to BSI regulations
n.s. ... not supported
In principle, the Swissbit Cloud TSE supports all operating systems on which JAVA can be executed.
Comments
0 comments
Please sign in to leave a comment.