The CCN certifies the security of Utimaco's HSM with Common Criteria

The CCN, Spain's National Cryptology Centre, endorses the security of Utimaco HSMs through Common Criteria certification. 

Madrid, Spain – 26 November 2025 – The General Purpose Hardware Security Modules (HSMs) from Utimaco, a leading global provider of IT security solutions, have recently been Common Criteria certified and included in the STIC CCN Product and Service Catalog in the highest category of its qualified ICT security products. 

This certification is in addition to other international certifications such as FIPS 140, PCI PTS HSM v3, and CC/NITES.

The National Cryptology Center (CCN) is the agency responsible for ensuring the security of Information and Communication Technologies (ICT) in different public sector entities, as well as the security of systems that process, store, or transmit classified information. 

This Common Criteria certificate is the result of analysing the security of products and systems, considering how they function or the functions intended to provide security to the object of evaluation (OE) itself.

National Security Scheme (ENS)

The STIC Product and Service Catalog (CPSTIC) provides a list of products and services with security guarantees verified by the National Cryptology Centre for deployment in systems under the National Security Scheme (ENS) and systems that handle National Classified Information. 

The Spanish National Security Scheme establishes the security policy for the adequate protection of the information processed and the services provided through a common approach of basic principles, minimum requirements, protection measures, and compliance and monitoring mechanisms for the public sector, as well as private sector technology providers that collaborate with the Administration. 

Utimaco's general-purpose HSMs have this classification and can be used in any systems classified within all categories established under the scope of the ENS. 

In the words of Pablo Juan Mejía, Utimaco's general manager for Iberia and Latin America: “This certification provides extra security for our general-purpose HSMs in line with the requirements demanded by the government and public administration and other critical infrastructures in Spain.” 

Use Cases and Certifications for Utimaco's General Purpose HSM

Utimaco's secure HSM combines scalable multi-tenancy with superior performance. Its container-based architecture supports up to 31 tenants and allows flexibility in use cases such as PQC, 5G, blockchain, and custom applications, including proprietary algorithms and customer key derivations via the software development kit.

Built on a modern container-based design and inspired by cloud technology. 

Supporting up to 31 containers and multiple PKCS #11 partitions per cHSM, it ensures seamless application separation and key partitioning, making it the ideal choice for all types of cryptographic applications and ready for the encryption of the future thanks to its ability to support post-quantum algorithms without the need for additional hardware.

All Utimaco HSMs are crypto-agile and validated by the international security certifications FIPS 140-2 Level 3 (Level 4 pending) and PCI PTS HSM V3.

Available as LAN devices or PCIe cards, with field upgrades between models such as Se100, Se2k, Se5k, Se15k, and Se40k that support both external and internal storage. Also available as a service.

They can be found in the 5G Protect, Blockchain Protect, Double Key Encryption, and Quantum Protect solution packages.