General Purpose HSM as a Service

Overview
Key Features
Description
Specifications
Add Ons
Use Cases
Related Products

The General Purpose HSM as a Service designed for multi-cloud security strategies

The General Purpose HSM aaS is a cloud-based GP HSM offering hosted in one of Utimaco’s secure, certified datacenters.

It enables secure key generation, storage, and management under the customers’ sole control.

Key Features
Description
Specifications
Add Ons

No Implementation Effort

Eliminates the requirement for hardware deployment or software management for the customer by combining GP HSM service, maintenance, and hosting.

FIPS-Certified

Provides highest security with a FIPS 140-2 Level 3 validated HSM hosted in a secure, certified data center within dedicated racks that can be managed remotely from any location.

No CSP Vendor Lock-in

Works with all major cloud service providers (including Amazon AWS, Microsoft Azure, Google Cloud, and more) without vendor lock-in, making it the ideal solution for multi-cloud strategies.

High Availability

Provides highest availability depending on the setup: 99% guaranteed availability with one HSM at a single site, up to 99,999% availability with redundant data centers and two HSMs per site.

24/7 Emergency Support

A dedicated crypto expert team with knowledge directly from Utimaco is available 24/7 to handle emergency cases professionally and rapidly.

The General Purpose HSM aaS provides access to a FIPS 140-2 Level 3 HSM that is fully hosted by Utimaco but under customers’ sole remote control. It enables secure key generation, storage, and management without the need for setup, maintenance, or implementation efforts.

Utilizing General Purpose HSM as a Service enables organizations to leverage from most robust security for their digital infrastructure while reducing total cost of ownership by eliminating investments related to hardware and their hosting and management.

Supported cryptographic algorithms

RSA, DSA, ECDSA with NIST and Brainpool curves, EdDSA
DH, ECDH with NIST, Brainpool and Montgomery curves
Edwards curves Ed25519 and Ed448
AES, Triple-DES, DES
MAC, CMAC, HMAC
SHA-1, SHA-2, SHA-3, RIPEMD
Hash-based deterministic random number generator (DRG.4 acc. AIS 31)
True random number generator (PTG.2 acc. AIS 31)
Chinese Algorithms
Can be upgraded with blockchain-specific algorithms such as BIP32/44 and SLIP-010 on request

Cryptographic Interfaces (APIs)

PKCS #11
Java Cryptography Extension (JCE)
Microsoft Crypto API (CSP), Cryptography Next Generation (CNG), and SQL
Extensible Key Management (SQLEKM)
OpenSSL
Utimaco‘s comprehensive Cryptographic eXtended services Interface (CXI)

Hosting Information

Hosted in an ISO/IEC 27001, HIPAA, PCI, and GSMA SAS-SM compliant data center
Provision of all hardware and software in the data center
Maintenance of equipment in the data center and replacing failed units
Setup and additional hardware included
Secure server room with dedicated HSM per customer
All relevant security and regulatory certifications
Current regions: Europe & Americas

Software Development Kit

Learn More

360 HSM Monitoring

Learn More

Use Cases

Document Signing

Fortify Your Signatures: Elevate Security with HSM-Powered Document Signing

Learn More

Public Key Infrastructure

Generate and protect cryptographic keys used for certificates in a Public Key Infrastructure.

Learn More

Key Injection

Key injection is the starting point for securely managing an IoT device. To make sure that device identities are not hacked, keys need to be generated by an HSM

Learn More

Code Signing

With code signing, organizations can prove that their software is trustworthy and end users can, in turn, verify the authenticity of files and program code.

Learn More

Certifications and Compliance

All General Purpose HSM as a Service models are certified to:

FIPS

General Purpose HSM as a Service provides compliance to FIPS 140-2 Level 3.

Case Study

Using Utimaco’s General Purpose HSM as a Service for Securing Medical IoT Devices

Utimaco’s General Purpose HSM as a Service provides the central Root of Trust, enabling highest security for the connected device systems of Proregia’s customers.