Skip to main content

Securosys Primus HSM and CloudsHSM Service

PLATFORM

Venafi’s “Certificate Manager, Self-Hosted” ( formerly Certificate Manager) and “Venafi Code Sign Manager” are leading products in Machine Identity Management (IoT). Integration with Securosys Primus HSM (on-premises) or CloudsHSM (HSM as a Service) enables to increase security and comply with strongest regulatory requirements by securely generating, storing, and using the sensitive key materials for machine identities on FIPS 140-2 Level 3 and CC EAL4+ certified Hardware Security Modules.

Integrating Securosys CloudsHSM or Primus HSM with Venafi’s Certificate Manager, Self-Hosted provides an array of benefits including:

  • Protect identities with
  • Highest-grade secure hardware key storage and protection
  • Securely generate keys from physical true random number generator
  • Largest built-in key store, or infinite key store on CloudsHSM
  • Fast regional access, load-balancing, and automatic redundancy failover, thanks to built-in large geo-redundant HA cluster mechanisms
  • Proof digital identities with built-in key attestation and audit features
  • Decanus terminal allows for easy and cost-efficient remote management of HSM clusters and CloudsHSM partitions (2-of-n, 2FA) without compromising security.
  • All HSMs are developed and manufactured in Switzerland using a trusted supply chain and are certified according FIPS140-2 level 3 and CC EAL4+ (EN419221-5) to fulfill strongest compliance regulations.

Securosys CloudsHSM is a Hardware Security Module (HSM) available as cloud service, without having to worry about time consuming things like evaluation, setup, operation, redundancy, and maintenance of the HSM infrastructure, and is scalable according to your needs. Redundant cluster architecture, providing different redundant regions up to redundant world-wide cluster.

Additional resources

Get it to work

Install and configure the Securosys Primus PKCS#11 provider on each Certificate Manager, Self-Hosted server in the cluster and establish redundant connectivity to your closest HSM cluster members. All necessary documentation can be downloaded from the Securosys Support Portal.

About Securosys

Securosys SA, headquartered in Zurich, Switzerland, is a renowned industry leader in cybersecurity, encryption, and digital identity protection since 2014. Its Swiss-built Hardware Security Modules (HSM) secure the Swiss financial market in collaboration with the Swiss National Bank, safeguarding daily transactions exceeding 100 billion Euros. Trusted by over half of the world’s Tier-1 banks, their HSMs meet the highest security standards, including FIPS and Common Criteria. Available as on-premise or cloud solution, Securosys HSMs offer secure key generation, encryption, and digital signing for finance, healthcare, IoT, and other sectors.

For more details, visit www.securosys.com or contact us at info(at)securosys.com. Our offices in Zurich, Munich, and Hong Kong provide personalized support.

Certificate Manager, Self-Hosted is the product formerly known as Venafi Trust Protection Platform