User's Guide : Usage Metrics

1.0 Introduction

This document outlines the structure and functionality of the Fortanix Data Security Manager (DSM) Dashboard.

Fortanix DSM collects detailed metrics that monitor the usage of objects associated with an account. Both real-time and historical usage data are available directly within the DSM dashboard, enabling account administrators to:

• Visualize key usage metrics in an intuitive dashboard interface.

• Detect significant changes in account activity patterns.

• Configure alerts and notifications when usage nears or exceeds defined thresholds.

These insights help proactively manage resource consumption and maintain visibility into account activity.

2.0 Account Administrator Dashboard View

The account administrator Dashboard in Fortanix DSM provides a comprehensive view of the account’s usage and activity for the current calendar month.

The following metrics are represented on the account administrator Dashboard:

• Total Active Apps: This is the sum of all cloud accounts configured in Fortanix DSM and all Fortanix DSM generic apps in the account.

  • Total Cloud Connections:

    • AWS Accounts

    • Azure Accounts

  • Total Generic Apps: These are applications that use:

    • Secrets Management operations (Encrypt, Decrypt, WrapKey, UnwrapKey, Sign, Verify, MacGenerate, and others).

    • Tokenization operations (Tokenize and Detokenize using format-preserving encryption (FPE) mode).

  • Total Operations: Includes count of all operations that are metered based on cryptographic key, secrets, and opaque objects:

    • Cryptographic Key:

      • Key Generation, Import, Export

      • Digest Key, Re-key, Derive Key, Agree Key

      • Persist Transient Key

      • Encrypt, Decrypt

      • Wrap, Unwrap

      • Multi-part Encrypt (Init, Update, Final)

      • Multi-part Decrypt (Init, Update, Final)

      • Signature Generation, Signature Verification

      • Mac Generation, Mac Verification

    • Secrets:

      • Import a Secret Object

      • Rotate a Secret Object with a new Secret Object

      • Export a Secret Object

    • Opaque Objects:

      • Import an Opaque Object

  • Tokenization Operations: Total tokenization operations performed such as:

    • Tokenize (encrypt)

    • Detokenize (decrypt)

    • App Manageable

    • Export

• Tokenization Apps: Total applications authorized to perform tokenization operations during the month.

• Total Security Objects

• Total Plugins

• HSM Gateways (if enabled)

  NOTE

  The Total Operations metric includes Tokenization Operations. For example, if 10,000 tokenization operations were performed, the Total Operations count will also be 10,000, while the individual standard cryptographic operations will display as 0.

• Usage: Displays historical usage data from the past six months for the following metrics:

  • Total Operations

  • Total Tokenization Operations

  • Total Plugin Invocations

Perform the following steps to export the usage data for a given period:

1. You can export the usage data to a CSV file for up to the past 12 months, which can be used for billing purposes. To download the CSV file, click DOWNLOAD CSV.

   

2. In the Download CSV file dialog box, select the number of months for which you want to export the data, then click DOWNLOAD.

   

1.1 Notification

If usage exceeds the limits of any billable key metrics, such as Total Operations, Total Apps (including cloud accounts), Total Plugins, or Total HSM Gateways, the account administrator will receive a notification on the Fortanix DSM Home page.

• For Apps, Security Objects, Groups, and Users, when the respective limits are reached, the Create buttons are disabled to prevent further additions.

• For Plugins, when the limit is reached, the Create plugin button remains enabled, but attempting to add a new plugin beyond the limit will trigger an error notification.

2.0 System Administrator Dashboard View

A Fortanix DSM system administrator can view the metrics and activity logs for all accounts.

Perform the following steps to view the usage of key metrics of an individual account:

1. In the Fortanix DSM user interface (UI), navigate to System Administration → Accounts menu item.

2. From the list of accounts, select the account for which you want to view the key metrics and open its detailed view.

   

3. If case of any anomaly is detected, the system administrator can notify the account administrator by clicking MESSAGE.

   

4. Click the Enabled toggle button to disable the account.

   

   NOTE

   A system administrator can disable an account but cannot delete it. Only an account administrator can delete an account, and only after removing all associated objects including apps, security objects, plugins, groups, and users from the account.