general purpose HSM

They can be used for the most common business applications, such as

• public key infrastructures (PKIs) and
• document signing – for example for eIDAS or
• code signing, but also for
• key injection for securing devices in the IoT and
• database encryption.

Utimaco’s General Purpose HSMs are

• quantum-safe,
• cloud– and
• blockchain-ready.

SecurityServer – Utimaco’s general purpose Hardware Security Module

SecurityServer comes as a bundle with your choice of Utimaco CryptoServer Se-Series Gen2 or CSe-Series hardware, and includes a software HSM simulator for easy integration testing and evaluation.
With precision engineering, the tamper-proof Utimaco Hardware general purpose Security Modules offer scalable performance with the highest level of physical security and defense mechanisms for hostile environments. Utimaco HSMs meet and fulfill numerous compliance requirements and industry standards, and work with all common algorithms and interfaces (APIs).
All SecurityServer HSMs support configurable role-based access control (C-RBAC). Authentication mechanisms range from username/password to key files and multi-factor smartcard-based authentication. Authentication can take the form of

• single-person authentication,
• four-eyes principle authentication or
• “m out of n” schemes (e.g. 3 out of 5).

All supported cryptographic APIs perform secure key storage inside the Hardware Security Module, with storage of up to several thousand keys, depending on algorithm and key size. Alternatively, keys may be stored as encrypted key files outside of the HSM. This allows for a virtually unlimited number of keys, and makes high-availability and load-balancing clusters easy to set up and synchronize.

A comprehensive set of Hardware Security Module administration and key management tools complements our SecurityServer offer.

It includes integration software that supports the industry standard PKCS#11, Microsoft CSP/CNG/SQLEKM and JCE interfaces.

SecurityServer Se-Series Gen2 or CSe-Series?

Utimaco’s Se-Series HSMs have been designed to meet standard physical security and anti-tampering technology industry requirements. The CSe-Series integrates even stronger tamper-detection and tamper-response technology. It is therefore the best choice for use in hostile and uncontrolled environments and in market segments with the highest security requirements, such as banking and government.

The Utimaco general purpose Hardware Security Module as Network appliance or PCIe plug-in card?

Both the SecurityServer Se-Series Gen2 and CSe-Series are available as

• 19 inch network-attached appliance (CryptoServer LAN) for immediate use in data centers, or as
• PCIe plug-in card to fit into your server architecture or customized chassis.

Note: CryptoServer refers to the Utimaco HSM hardware, whereas SecurityServer is the Utimaco HSM software.