General Purpose HSMs for various use cases
- Overview
- u.trust GP HSM
- CryptoServer GP HSM
- CryptoServer GP HSM CSe-Series
- Product Comparison
- Resources
About General Purpose HSMs
Hardware Security Modules (HSMs) are the root of trust for secure digital communications and applications. Utimaco’s versatile GP HSM portfolio offers security for every use case, from entry-level models to high-performance variants, all certified to meet the highest security standards.
Our HSMs are FIPS 140-2 Level 3 and 4 certified, with FIPS 140-3 Levels 3 and 4 in progress. Specialized models ensure compliance with regulations such as eIDAS or classified environments (VS-NfD). Furthermore, the u.trust GP HSM Se-Series designed crypto-agile and future-proof, enabling upgrades for Post Quantum Cryptography (PQC), blockchain, or 5G-specific algorithms.
All models are available as PCIe cards or LAN appliances.
u.trust General Purpose HSM Se-Series
The u.trust General Purpose HSM Se-Series combines scalable multi-tenancy functionality with superior performance. Its container-based architecture supports up to 31 containers and enables flexibility. It can be optionally upgraded with algorithms and features for specialized use cases, including PQC, 5G, blockchain, and custom applications.
Learn MoreApplication Packages
5G Protect
The solution for subscriber authentication and key agreement in mobile networks.
Blockchain Protect
The solution to create, verify, and protect blockchain transactions and assets.
Double Key Encryption
The Double Key Encryption Solution for data stored in Microsoft Azure Cloud.
Quantum Protect
The Post Quantum Cryptography firmware extension to add quantum resistance to your infrastructure.
CryptoServer General Purpose HSM
CryptoServer General Purpose HSM is specifically designed for eIDAS-compliant and classified use cases. This makes it the perfect HSM for public sector and entities requiring strict compliance, such as Trust Service Providers or critical infrastructure operators. The CryptoServer General Purpose HSM comes in two different compliance versions: CC eIDAS and VS-NfD (one of these options must be selected).
Learn MoreApplication Packages
CC eIDAS
Certified for the creation of eIDAS-compliant qualified signatures and seals, remote signing and the issuing of qualified certificates.
VS-NfD
Approved for classified environments according to VS-NfD, RESTREINT UE/EU RESTRICTED and NATO RESTRICTED.
CryptoServer General Purpose HSM CSe-Series
The CryptoServer General Purpose HSM CSe-Series is specifically designed for sensitive and critical applications such as in government, telecommunications or infrastructure. It is certified according to FIPS 140-2 Level 4 in the area of "physical security".
Learn MoreHSM Comparison
| u.trust General Purpose HSM Se-Series |
CryptoServer General Purpose HSM | CryptoServer General Purpose HSM CSe-Series |
General Purpose HSM as a Service | |
|---|---|---|---|---|
| FIPS 140-2 Level 3 |
 |
|
|
|
| FIPS 140-2 Level 4 |
|
|||
| FIPS 140-3 Level 3 |
In Progress | In Progress | ||
| FIPS 140-3 Level 4 |
In Progress | In Progress | ||
| Containerization | Yes, up to 31 cHSMs | Yes, up to 31 cHSMs | ||
| Performance | Up to 40,000 RSA 2K operations/s | Up to 3,000 RSA 2K operations/s | Up to 100 RSA 2K operations/s | Up to 40,000 RSA 2K operations/s |
| Performance Levels | Entry, mid, and high | Medium | Entry | Entry, mid, and high |
| PQC | * |
* |
||
| Blockchain | * |
* |
||
| CC eIDAS | On the roadmap | * |
On the roadmap | |
| VS-NfD | On the roadmap | * |
On the roadmap | |
| Deployment | On-premises (LAN appliance / PCIe card) | As a Service | ||
| Set-Up & Maintenance | Available against surcharge | |
||
| Learn More | Learn More | Learn More | Learn More | |
*
*
*
*
*
*
* available via application package
| Feature | FIPS 140-2 Level 3 |
|---|---|
| u.trust General Purpose HSM Se-Series | |
| CryptoServer General Purpose HSM | |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | |
| Feature | FIPS 140-2 Level 4 |
|---|---|
| u.trust General Purpose HSM Se-Series | |
| CryptoServer General Purpose HSM | |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service |
| Feature | FIPS 140-3 Level 3 |
|---|---|
| u.trust General Purpose HSM Se-Series | In Progress |
| CryptoServer General Purpose HSM | |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | In Progress |
| Feature | FIPS 140-3 Level 4 |
|---|---|
| u.trust General Purpose HSM Se-Series | In Progress |
| CryptoServer General Purpose HSM | |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | In Progress |
| Feature | Containerization |
|---|---|
| u.trust General Purpose HSM Se-Series | Yes, up to 31 cHSMs |
| CryptoServer General Purpose HSM | |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | Yes, up to 31 cHSMs |
| Feature | Performance |
|---|---|
| u.trust General Purpose HSM Se-Series | Up to 40,000 RSA 2K operations/s |
| CryptoServer General Purpose HSM | Up to 3,000 RSA 2K operations/s |
| CryptoServer General Purpose HSM CSe-Series | Up to 100 RSA 2K operations/s |
| General Purpose HSM as a Service | Up to 40,000 RSA 2K operations/s |
| Feature | Performance Levels |
|---|---|
| u.trust General Purpose HSM Se-Series | Entry, mid, and high |
| CryptoServer General Purpose HSM | Medium |
| CryptoServer General Purpose HSM CSe-Series | Entry |
| General Purpose HSM as a Service | Entry, mid, and high |
| Feature | PQC |
|---|---|
| u.trust General Purpose HSM Se-Series | * |
| CryptoServer General Purpose HSM | |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | * |
| Feature | Blockchain |
|---|---|
| u.trust General Purpose HSM Se-Series | * |
| CryptoServer General Purpose HSM | |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | * |
| Feature | CC eIDAS |
|---|---|
| u.trust General Purpose HSM Se-Series | On the roadmap |
| CryptoServer General Purpose HSM | * |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | On the roadmap |
| Feature | VS-NfD |
|---|---|
| u.trust General Purpose HSM Se-Series | On the roadmap |
| CryptoServer General Purpose HSM | * |
| CryptoServer General Purpose HSM CSe-Series | |
| General Purpose HSM as a Service | On the roadmap |
| Feature | Deployment |
|---|---|
| u.trust General Purpose HSM Se-Series | On-premises (LAN appliance / PCIe card) |
| CryptoServer General Purpose HSM | As a Service |
| Feature | Set-Up & Maintenance |
|---|---|
| u.trust General Purpose HSM Se-Series | Available against surcharge |
| CryptoServer General Purpose HSM | |
GP HSMs: Also Available as a Service
Learn More
Resources
The u.trust General Purpose HSM Se-Series combines superior performance with multi-tenancy. From entry-level to high-performance use cases, all models are future-proof with....
u.trust General Purpose HSM Se-Series
The u.trust General Purpose HSM Se-Series combines superior performance with multi-tenancy. From entry-level to high-performance use cases, all models are future-proof with....
Download
The CC eIDAS compliance version for CryptoServer General Purpose HSM supports Trust Service Providers (TSPs) in fulfilling policy and security requirements defined in various ETSI technical standards (ETSI EN 319 401, EN 319 411, EN 319 421).
CC eIDAS
The CC eIDAS compliance version for CryptoServer General Purpose HSM supports Trust Service Providers (TSPs) in fulfilling policy and security requirements defined in various ETSI technical standards (ETSI EN 319 401, EN 319 411, EN 319 421).
Download
Governments and government-like organizations like NATO declare as “classified information” such information that they consider particularly sensitive.
VS-NfD
Governments and government-like organizations like NATO declare as “classified information” such information that they consider particularly sensitive.
Download
