HSM Support

Introduction

A Hardware Security Module (HSM) is a dedicated, tamper-resistant physical computing device designed to securely generate, store, and manage cryptographic keys, as well as execute cryptographic operations (such as encryption, decryption, and digital signing) within a hardened environment. By isolating sensitive cryptographic material from the host operating system and general-purpose memory, HSMs provide high assurance, regulatory compliance (e.g., FIPS 140-2/140-3 and Common Criteria), and robust protection against key extraction and tampering.

Supported HSMs

The IS Blocks KMS support several types of Hardware Security Modules (HSMs) via the PKCS#11 Interface.

HSM's tested include:

• Utimaco Series
• Thales Luna Series
• Thales Protect Server Series