Container-based cryptography hardware security module management

A system comprising:

• a memory having computer readable instructions;
• and
• one or more processors for executing the computer readable instructions, the computer readable instructions controlling the one or more processors to perform operations comprising:
• providing a cryptography work daemon container in a computer system, wherein the cryptography work daemon container in the computer system has privileged access to a cryptography hardware security module (HSM) of the computer system;
• receiving, by the cryptography work daemon container, a request for a cryptography function of the cryptography HSM from an application container in the computer system;
• causing, by the cryptography work daemon container, the cryptography HSM to perform the cryptography function based on receiving the request;
• running, by the cryptography work daemon container, an HSM diagnostic tool that gathers diagnostic information from the cryptography HSM;
• storing the diagnostic information in shared storage in the computer system;
• collecting, by a cryptography administrator container, the diagnostic information from the shared storage;
• and
• providing the collected diagnostic information to a user.

A non-transitory computer readable storage medium executable by one or more processors to cause the one or more processors to perform operations comprising:

• providing a cryptography work daemon container in a computer system, wherein the cryptography work daemon container in the computer system has privileged access to a cryptography hardware security module (HSM) of the computer system;
• receiving, by the cryptography work daemon container, a request for a cryptography function of the cryptography HSM from an application container in the computer system;
• causing, by the cryptography work daemon container, the cryptography HSM to perform the cryptography function based on receiving the request;
• running, by the cryptography work daemon container, an HSM diagnostic tool that gathers diagnostic information from the cryptography HSM;
• storing the diagnostic information in shared storage in the computer system;
• collecting, by a cryptography administrator container, the diagnostic information from the shared storage;
• and
• providing the collected diagnostic information to a user.