Enterprise Secure Key Manager

Overview
Key Features
Description
Specifications
Models
Use Cases
Related Products

The holistic KMS enabling central access, management, and storage

Enterprise Secure Key Manager is Utimaco’s central key management system enabling unified access and management as well as secure storage of all cryptographic keys through one single pane of glass, whether they are utilized on premises or in the cloud.

Key Features
Description
Specifications

Scalable to thousands of nodes, and millions of keys

Provides unprecedented capacity for more than 2 million keys, over 25,000 clients, and thousands of ESKM nodes per distributed cluster.

Competitive Application Programming Interfaces (APIs)

Comes with various APIs for easy integration, such as OASIS KMIP (Key Management Interoperability Protocol), RESTful interface API, and KMS.

Highest Level of Security on the Hardware Level

Delivers a security hardened appliance with embedded u.trust General Purpose HSM Se-Series and CryptoServer General Purpose HSM as well as Se-Series for highest local key protection* and FIPS-compliant architecture**.

Simplified Key Lifecycle Management

Enables unified enterprise key management with reliable policy controls, centralized administration, and comprehensive audit trails.

Cloud and On-Prem Workloads

Offers centralized management and storage for on-premises as well as cloud keys, delivering high security and compliance throughout the complete key lifecycle.

*For ESKM L3 and ESKM L4 (physical)
** FIPS 140-3 Level 2 appliance (pending), FIPS 140-2 L3 and L4 (embedded HSM)

Enterprise Secure Key Manager enables individual key management strategies by providing a single pane of glass for all cryptographic keys, whether on-premises or in the cloud.

Due to its broad integration capabilities, it is acknowledged as trusted solution for a variety of technology partner integrations with companies around the globe, such as Dell, HPE or NetApp.

Enabled through its crypto-agility it is also capable to manage keys created with post quantum cryptography algorithms recommended by NIST and BSI.

Enterprise Key Manager

*: for ESKM L3 and ESKM L4 (physical)

** FIPS 140-3 Level 2 appliance (pending), FIPS 140-2 L3 and L4 (embedded HSM)

Supported Cryptographic Algorithms

Such as AES, 3-Key Triple DES, HMAC, RSA, and ECDSA key types
Secure administrator remote access through TLS
On-demand backups with SSH key authentication

Custom Integrations

Simplified RESTful API interface for key CRUD (Create, Read, Update, Delete) operations and crypto
Supports open client libraries such as KMIP, OpenKMIP and PyKMIP
Conforms with KMIP 1.0 through 2.1 specifications
Implements auto-registration with native XML-based KMS protocol
NIC Teaming Support

Pre-Installed Software

Comprehensive monitoring, recovery, scheduled backups, log rotations, and restore functionality
Web browser GUI and Command Line Interface supported
SNMP alerts and SIEM log monitoring
TLS and on-demand backups with SSH key authentication, for secure administrator remote access

Models

Enterprise Secure Key Manager is available in four different models, which can be effortlessly installed and configured. All models offer transparent client licensing, with no hidden costs attached to key volume or scalability.

Contact Sales

ESKM L1 (vESKM)

Virtual Enterprise Secure Key Manager (vESKM) is a pre-configured and security hardened virtual appliance providing FIPS 140-2 Level 1 Security and is fully integrable with Utimaco’s CC and VS-NfD certified HSMs.

ESKM L2

ESKM L2 is a 1U hardware appliance providing FIPS 140-2 Level 2 security.

ESKM L3

ESKM L3 is a 1U hardware appliance providing FIPS 140-2 Level 3 Security via embedded Utimaco General Purpose Hardware Security Module.

ESKM L4

ESKM L4 is a 1U hardware appliance providing FIPS 140-2 Level 4 Security via embedded Utimaco General Purpose Hardware Security Module.

Use Cases

Data Access Management

Manage and control which teams, departments, and single employees have access to certain kinds of data.

Learn More

Key Management Solution

Sensitive data must not only be encrypted, but also kept secure while in motion, in use, or at rest. Reap the benefits of properly managing your encryption keys.

Learn More

Certifications and Compliance

All Enterprise Secure Key Manager models are certified to:

FIPS

Enterprise Secure Key Manager provides compliance from FIPS 140-2 Level 1 to Level 4 depending on the individual model and HSM integration. The certification according to FIPS 140-3 Level 2 is pending.

NIST

Meeting the standards of NIST SP 800-131A

CC

Provides compliance to CC EAL2+

PCI

Provides controls for PCI-DSS

HIPAA

Enables compliance to HIPAA as well as EU data privacy laws, and other regional privacy mandates.

Key Management: Also Available as a Service

Learn More

Joint Solution Brief

Dell PowerEdge Server and Utimaco Enterprise Secure Key Manager for Centralized Storage and Management of Server Encryption Keys

The integration of Enterprise Secure Key Manager enables centralized and transparent management and control of all keys used to encrypt data stored on Dell PowerEdge servers.