SecurityServer

Like all Utimaco HMs SecurityServer provides scalable performance with the highest level of physical security and tamper detection and response mechanisms. Furthermore it meets and fulfills numerous compliance requirements and industry standards and supports all common cryptographic algorithms and interfaces(APIs).

All SecurityServer HSMs support configurable role-based access control (C-RBAC). The authentication mechanisms range from username/password to key files and multi-factor smartcard-based authentication. Authentication can take the form of

single-person authentication,
four-eyes principle authentication or
“m out of n” schemes (e.g. 3 out of 5).

All supported cryptographic APIs perform secure key storage inside the HSM, with storage of up to several thousand keys, depending on algorithm and key size. Alternatively, keys may be stored as encrypted and integrity-protected tokens outside of the HSM. This allows the usage of a virtually unlimited number of keys. Through this high-availability and load-balancing clusters can easily be set up and synchronized.

SecurityServer is available as Se-Series or or CSe-Series HSM and includes a software HSM simulator for evaluation and integration testing.

A comprehensive Tool-Kit for the administration of the HSM and the key management completes our SecurityServer offer.

SecurityServer Se-Series Gen2 or CSe-Series?

Utimaco’s Se-Series HSMs have been designed to meet typical physical security and anti-tampering requirements. Because of that HMS of the Se-Series are qualified for the use in companies and authorities. For example for the encryption of data bases with sensitive information and in production environments for personalization und key injection for e.g. smart meters, control units of vehicles or printers and printer cartridges.

The technology of the CSe-series provides even stronger tamper-detection and tamper-response mechanisms. HSMs of the CSe-series are therefore the best choice for use in hostile and uncontrolled environments like toll bridges and in market segments with highest security requirements, such as banking and government.