SecurityServer

Overview Cryptography & Tamper Technology Model Drill Down Pricing Support Downloads

Maximum flexibility when using Hardware Security Modules

Business critical information must be protected against un-authorised access, manipulation and theft. SafeGuard® SecurityServer is the ideal product package for all critical security processes.

Integrated key management
Simultaneous application access: Multiple applications can access the respective key container within the HSM at the same time
Scalability and high-availability
Remote administration
Remote diagnostics via a network management system using SNMP
Comprehensive product package: No additional client or connection licenses required

Some example fields of application

eGovernment

Based on Safeguard Security Server CS Series our eGovernment solution guarantees the maximum of security for critical infrastructures. With a complete set of all international algorithms, and an integrated true random number generator SafeGuard^® CryptoServer CS Series underlie your critical processes. Next to standardized algorithms and methods, our certified SafeGuard^® CryptoServers CS Series is in the evaluation process for the Common Criteria EAL4 + certification.
Banking and Finance

The SafeGuard^® SecurityServer fulfills all the PCI DSS HSM Security requirements. Our solutions meet the demands for extremely high transaction volumes for cryptographic processes.

At the same time, we grant you maximum flexibility of our solution for the integration into your infrastructure, through the broad range of standard API's.
Business Processes

Our hardware security portfolio guarantees the integrity and confidentiality of your critical data and processes. Thanks to our broad network of technology partners we are supporting all standard interfaces – without any additional license structures. Our Business Processes solution can thus easily be integrated into your IT-infrastructure.
DNSSEC

SafeGuard^® SecurityServer is able to be used for DNS Security Extensions.
Benefit from the advantages of a hardware solution compared to software-only solutions:
- fast implementation process with the aid of our DNSSEC Simulator – creates low investment risk without hidden consequential costs
- highest security and tamper resistance
- certified compliance with FIPS 140-2 level 3 and 4
- relieves DNS servers from performing complex cryptographic calculations
- support for popular DNS servers and DNS signers such as BIND and OpenDNSSEC
- scalable to your needs and thus cost-effective

Cryptography & Tamper Technology

The most common usage of Hardware Security Modules is the tamper-proof preparation and storage of cryptographic keys. Within these mission-critical host applications Hardware Security Modules are included as the standard today.

With the SafeGuard^® CryptoServer product line we are offering different kinds of security and performance levels in terms of tamper technology. With our experience of over 25 years in developing and manufacturing hardware security modules we are able to provide our customers the highest product quality and reliability in terms of tamper technology starting from standard tamper-proof devices up to the highly secure, tamper-responsive HSM SafeGuard^® CryptoServer CS.

Details

Cryptographic Algorithms

SafeGuard^® SecurityServer is available with the following cryptographic algorithms:
- RSA
- DSA, ECDSA
- AES, DES, Triple DES
- AES MAC, Triple DES MAC, Retail MAC
- Hash algorithms SHA-1, SHA-2 family, RIPEMD-160, MD5
- Diffie-Hellman
- Additional algorithms on request
Certification

SafeGuard^® SecurityServer is available with the following certification levels:
- FIPS 140-2 level 3
- FIPS level 4 for „physical security“
- In certification: Common Criteria EAL4+
For details please consult the Model Drill Down section
Random Number Generation

Safeguard SecurityServer comes with the following options:
- Physical random number generation in accordance with AIS 31 (class P2)
- Deterministic random number generation according to FIPS 186-3 or AIS 20 (class K4)
For details please consult the Model Drill Down section
Tamper Technology

SafeGuard SecurityServer is available with the following tamper features:
- tamper-proof
- tamper-responsive
- secure deletion if mechanical / physical / chemical attacs occur
- secure deletion in case of temperature fluctuation or if the energy supply is outside of defined limits
- possibility of manual deletion
For Details please consult the Model Drill Down section

Model Based Highlights

Se-Series

The industry standard HSM optimized for common security requirements in a commercial setting

Se LAN

Central point of security for critical applications
Simplifies encryption and signing key management
Ensures business continuity with high availability features
Extreme scalability with no limitation regarding connections

Hardware Specifications
- Power Supplies: AC or optional DC
- Interfaces: USB and serial ports, 2 Ethernet up to 1 GBit
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
SNMP Support
- MIB Files are provided on the product CD

Se PCIe

Cost effective HSM for servers
Optimized for cryptographic acceleration in host application
Integrated key management

Hardware Specifications
- Dimensions: length: 167.65 mm (“half” length) height: 111.15 mm (“full” height)
- Operating power 3.3 volt (PCI express bus specification)
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris

CS-Series

High-end tamper responding HSM for advanced hardware security requirements

CS LAN

Central point of highest physical security for ePassport and eID applications
Simplifies key management
High availability features
Extreme scalability with no limitation regarding connections

Hardware Specifications
- Power Supplies: AC or optional D
- Interfaces: USB and serial ports, 2 Ethernet up to 1 GBit
- Frontpanel display for status and basic administration
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris
SNMP Support
- MIB Files are provided on the product CD

CS PCI

Highest security HSM for eID/ePassport server applications
Optimized for cryptographic acceleration in host applications
Integrated key management
Delivers FIPS and Common Criteria compliance

Hardware Specifications
- Dimensions: length: 167 mm (“half” length) height: 107 mm (“full” height) operating power 3.3 and 5.0 volt (PCI bus specification) environmental temperature in operation: +10°C to +35°C / +50°F to +95°F
Performance
Supported OS
- Microsoft Windows
- Linux
- Solaris

Pricing

With the SecurityServer package, Utimaco offers a fair and transparent pricing to all its customers.

Based on our comprehensive software and hardware architecture we are able to offer a comprehensive support of the standard API's that comes with the SecurityServer package. This broad flexibility enables our customers to integrate the Utimaco HSMs into their specific system architecture and processes without any difficulties. Moreover, our customers have the option to expand the usage of the HSM and to comprehensively secure further processes.

Also we do not limit our server product in terms of connections and we do not restrict the interface usage.

In Detail:

Initial costs

SafeGuard^® CryptoServer systems have been designed to keep customer critical security processes trustworthy.
SafeGuard CryptoServer offers uncompromised german quality, product innovation, leading edge performance and easy-to-manage hardware securtiy modules. Resulting in an outstanding price/performance ratio that drives excellent ROI across a versatile range of use.
Maintenance

Quality, service level and availability in terms of hardware security modules are today more and more in the focus of the operating unit at the customer's site. Therefore, Utimaco offers a fair and transparent service model for all SafeGuard^® CryptoServer product lines. Starting from 24x7 support, down to a tailored maintenance model with onsite spare parts, we are able to offer you the best and fair service for your business needs.
Costs of operation

With the dynamic upgrade model in terms of transaction performance, SafeGuard^® CryptoServer offers you the best model in the market to adapt the transaction throughput rate of the hardware security module to your business needs. With the flexibility to upgrade an existing CryptoServer to the next level of performance we are able to follow your business requirements as they change.
Philosophy

The combination of an extremely efficient hardware and software architecture – optimized over many years – makes the SafeGuard^® CryptoServer family absolutely unique.

Support

Security and availability of your infrastructure is the foundation to your success today.

With our flexible service portfolio we provide multi-level support options that suit your business needs. Starting at a basic support and hardware repair service up to a 24/7 service. We are able to tailor the services exactly as you need.

How to contact us:

E-Mail: support-cs@utimaco.de

Download SecurityServer Simulator

To support our customers from the beginning of the selection process on, Utimaco offers a complete functional SafeGuard^® Security Simulator.

After registration you can download the SafeGuard^® SecurityServer Simulator. Included are all API's, libraries, administration tools and documentation of the SecurityServer. Utimaco's SafeGuard^® SecurityServer Simulator at a glance:

Full access to all API's, e.g. PCKS#11, JCE, and more
Complete software simulation of the SafeGuard CryptoServer

Download Detailed Information

Please contact us for more detailed information or to find out which partner can help you best with your request