Keep your keys in the tamper-resistant hardware of a Luna HSM, and split one appliance into independent partitions to serve several applications and teams securely.
Pricing is prepared per project, based on model, performance licence, redundancy and support term.
Network appliance, in-server card or portable USB: all within the same Luna software family.
Rack-mounted appliance that can be partitioned to serve many applications over the network.
A card installed in the server, providing cryptography right next to the application.
For offline root CA keys and key ceremonies that must stay off the network.
The key is created in hardware, stays in hardware, and is used in hardware.
Keys are created by the true random number generator inside the FIPS boundary and never leave the device in plain text.
Each application or team has its own partition and credentials; partitions cannot reach each other's keys.
Signing, encryption and decryption run inside the HSM; the application server only receives the result.
The whole key lifecycle (generation, use, destruction) stays in certified hardware.
Protection circuits that erase sensitive data when physical intrusion is detected.
Separate applications and teams with several independent partitions on one appliance.
Combine several appliances in an HA group for uninterrupted service.
A path to new algorithms and post-quantum standards through software updates.
PKCS#11, CNG/KSP, JCA/JCE and OpenSSL for common PKI, database and cloud integrations.
Anywhere a key must never reach a server in plain text: from root certificates to payment systems.
Generation, storage and signing ceremonies for root and issuing CA keys.
Keys for software, drivers, e-documents and electronic signatures protected in hardware.
Private keys of load balancers and web servers made non-exportable.
TDE master keys for Oracle, SQL Server and other systems kept in the HSM.
Cryptographic operations for card data protection, PIN and tokenization.
Bring your own key (BYOK) and key sovereignty on AWS, Azure and Google Cloud.
Level and scope depend on the selected model and firmware version. We confirm your model's current certification status in writing with the quote.
With software, the key lives in the server's memory and disk; if the server is compromised, the key can be copied. In an HSM, the key never leaves the certified hardware in plain text and operations run inside it.
As a network appliance (Luna Network HSM), an in-server card (Luna PCIe HSM) and a portable device (Luna USB HSM). We can also quote a cloud HSM service option.
Luna HSMs hold FIPS Level 3 and Common Criteria evaluations and are used in PCI DSS, eIDAS and GDPR projects. We confirm your model's current certification status in writing with the quote.
Yes. Through PKCS#11, Microsoft CNG/KSP, Java JCA/JCE and OpenSSL it works with common CA, database, web server and cloud key management products.
A project-specific quote is prepared based on model and performance tier, number of partitions, HA design, support term and add-on licences.
Share your use case, transaction volume and compliance needs; we will send a quote and architecture proposal within one business day.