Securely protect your data and information in the private cloud by the combined use of OpenStack Barbican and Utimaco SecurityServer
OpenStack is one of the most important open-source cloud platforms, providing various capabilities such as Infrastructure as a Service (IaaS), data-center management, and private cloud to organizations of all sizes across various industries.
By combining the outstanding capabilities of SecurityServer and OpenStack Barbican, the extra layer of security is added to reliably secure all data stored in the cloud.
Preventing any unauthorized access to all data stored in the cloud: Utimaco SecurityServer + OpenStack Barbican
All credentials used to enter any cloud environment must be securely stored to ensure security and confidentiality of the cloud-stored data. Using cryptographic keys to encrypt these credentials is hence of special importance.
If the keys are not securely stored, attackers could gain access to them, use them to decrypt the access credentials and gain access to cloud-stored data.
By utilizing SecurityServer, the keys used to encrypt the access credentials are generated and stored inside the tamper-protected boundaries of the HSM, ensuring their highest physical and logical security.
SecurityServer is Utimaco’s FIPS 140-2 Level 3-certified General-Purpose HSM enabling the highest security for cryptographic keys to act as the Root of Trust for cloud-stored data. In addition, SecurityServer provides full key lifecycle management and cryptographic load balancing.
Key Benefits
Reliable Cloud Access Management
Based on highest security for cryptographic keys used to encrypt credentials enabling access to cloud environments
Highest Security for Individual Tenant’s Credentials
The key encryption keys are encrypted and held in the SecurityServer to prevent them from falling into wrong hands
Straightforward Key Rotation
Easier key rotation as only the Master Encryption Keys and the HMAC key must be rotated
Fulfilling Various Compliance Requirements
Such as FIPS 140-2 Level 3, GDPR, HIPAA and ETSI C-ITS
Easy Integration
Based on the PKCS#11 plugin support
