Enterprise Secure Key Manager

The most interoperable and integrated Key Manager in the Market

Scalable to thousands of nodes and millions of keys
Competitive APIs
Highest Level of Security on the Hardware Level

Delivery Time:

About 2-4 weeks

Key Benefits

Scalable to thousands of nodes, and millions of keys

Unprecedented Capacity for more than2 million keys, more than 25,000 clients, and thousands of ESKM nodes per distributed cluster.

Competitive Application Programming Interfaces (APIs)

OASIS KMIP (Key Management Interoperability Protocol) · RESTful interface API · KMS

Highest Level of Security on the Hardware Level

Security hardened appliance with embedded Utimaco GP HSM for highest local key protection and encrypted redundant storage, compliant up to FIPS 140-2 Level 4.

Cloud and on-prem workloads

Offers organizations of all sizes a superior solution for key storage and management capabilities, delivering high security and compliance; whether on premises or in the cloud.

Simplified Key Lifecycle Management

Enables unified enterprise key management with reliable policy controls, centralized administration, and comprehensive audit trails.

Utimaco's Enterprise Secure Key Manager (ESKM) provides a single pane of glass of all cryptographic keys, enabling your individual key management strategy.

Key Management System Migration made easy

When it comes time to selecting a new Key Management System, choosing the right solution is essential to enable a centralized key management and administration strategy for all cryptographic keys, independent from their storage location.

ESKM provides all features and benefits to fully support your cryptographic key management use cases while providing the highest security and compliance. Acting as the single pane of glass, it provides a central key storage and management capabilities; whether stored on premises or in the cloud.

Multi-Cloud Capability

ESKM integrates with all major Cloud Service Providers to ensure key security throughout organizations’ multi-cloud and hybrid strategies while enabling them to keep sovereignty of their keys.

_{^{*: for ESKM L3 and ESKM L4 (physical)}}
_{^{** for vESKM}}

Are you interested in learning how to migrate to the Cloud the easy way?

Unlock Safe Cloud Migration The Key Management Strategies You Need Graphic

Scalable to thousands of nodes, and millions of keys

Unprecedented Capacity for more than 2 million keys, more than 25,000 clients, and thousands of ESKM nodes per distributed cluster.

Competitive Application Programming Interfaces (APIs)

OASIS KMIP (Key Management Interoperability Protocol)
RESTful interface API
KMS

Highest Level of Security on the Hardware Level

Security hardened Linux-based server appliance with encrypted redundant storage
FIPS 140-2 Level 1, Level 2, Level 3, and Level 4 (physical) compliant architecture
Certificate-based authentication
Built-in CA
Embedded Utimaco GP HSM for highest local key protection*
Integration with CC and VS-NfD certified Utimaco GP HSM for key protection compliant to specific compliance requirements**

Cloud and on-prem workloads

Offers organizations of all sizes a superior solution for key storage and management capabilities, delivering high security and compliance; whether on premises or in the cloud.

Simplified Key Lifecycle Management

Enables unified enterprise key management with reliable policy controls, centralized administration, and comprehensive audit trails.

Secure Audit Logging

Complete with digitally signed logs and key lifecycle activities

Reducing audit costs
Enhancing visibility
Accelerating operational efficiency

Supported Cryptographic Algorithms

Such as AES, 3-Key Triple DES, HMAC, RSA, and ECDSA key types
Secure administrator remote access through TLS
On-demand backups with SSH key authentication

Custom Integrations

Simplified RESTful API interface for key CRUD (Create, Read, Update, Delete) operations and crypto
Supports open client libraries such as KMIP, OpenKMIP and PyKMIP
Conforms with KMIP 1.0 through 2.1 specifications
Implements auto-registration with native XML-based KMS protocol
NIC Teaming Support

Pre-Installed Software

Comprehensive monitoring, recovery, scheduled backups, log rotations, and restore functionality
Web browser GUI and Command Line Interface supported
SNMP alerts and SIEM log monitoring
TLS and on-demand backups with SSH key authentication, for secure administrator remote access*

^{* for ESKM L3 and ESKM L4 (physical)}
^{** for vESKM}
^{*** depending on the ESKM Deployment Option}

On-premise

LAN Appliance

Our on-premise options allow hosting the product directly on-site in your own network or data center.

Virtual Appliance

The virtual version of ESKM is a pre-configured, security-hardened virtual appliance, helping you to keep control over your Total Cost of Ownership (TCO).

ESKM Migration

Your migration path from ESKM v.5 to v.8 made easy

With the ESKM v8 Hardware Appliance we provide you with all features and benefits to fully support your cryptographic key management use cases while providing the highest security and capacity.