Protect keys outside the application server
Private keys are used to sign information and establish identity, among other things. They therefore need protection against copying and unauthorized use.
An HSM, or hardware security module, protects the keys and performs cryptographic operations. A product can, for example, request a signature without the private key leaving the HSM.
This reduces the risk of the key being exposed if someone gains access to the application server.
Add key protection without owning HSM equipment
HSM as a service is an option for your Fortified ID products. It works both when you introduce our products and when you want to strengthen protection in an existing installation.
You get access to hardware-based key protection without having to buy, install and maintain the physical HSM equipment yourself.
We help you:
- Choose a key protection setup for your Fortified ID products.
- Plan the connection around your hosting environment and requirements for response times and availability.
- Configure the products to use the HSM service.
Keep your hosting environment
Your Fortified ID products can run in your own data center or with a cloud provider such as GCP, Azure or AWS and connect to the HSM service.
We plan the connection with you so it works with your infrastructure and your security and operational requirements.
Key protection in Sweden, with the option to inspect
The HSM equipment is located in Swedish data centers and secured in locked cages and racks. The service is operated by a Swedish company with Swedish owners.
Under agreed terms, you can visit and inspect the service delivery and the physical environment. This gives you insight and a basis for assessing the service against your organization’s security requirements.
Already have your own HSM?
You can also connect your Fortified ID products to an existing local Thales Luna HSM. We help you design and configure the connection so you can build on your own HSM environment.
Add HSM to your solution
Would you like to strengthen key protection in your Fortified ID products? We help you from choosing a setup through to a configured connection.