Home

Security Product

Hardware Security Module(HSM)

ESKM

ESKM

The most interoperable and integrated Key Manager in the Market

Utimaco's ESKM (Enterprise Secure Key Manager) provides a single pane of glass of all cryptographic keys.

ESKM Highlights

The Single Pane of Glass of all Cryptographic Keys

Ease of Use

High Availability

All Software Included, Pre-installed, Digitally Signed,and Verified at Startup

Available as Hardware Appliance and Virtual Version

About ESKM

Highest Level of Security on the Hardware Level

Security hardened Linux-based server appliance with encrypted redundant storage FIPS-compliant architecture*, certificate-based authentication, and built-in CA Embedded Utimaco GP HSM for highest local key protection** Integration with CC and VS-NfD certified Utimaco GP HSM for key protection compliant to specific compliance requirements***

Scalable to thousands of nodes, and millions of keys

Unprecedented Capacity for >2 million keys, >25,000 clients, and thousands of ESKM nodes per distributed cluster.

Competitive Application Programming Interfaces (APIs)

OASIS KMIP (Key Management Interoperability Protocol) ,RESTful interface API,KMS

Cloud and on-prem workloads

ESKM offers organizations of all sizes a superior solution for key storage and management capabilities, delivering high security and compliance; whether on premises or in the cloud.

Simplified Key Lifecycle Management

Enables unified enterprise key management with reliable policy controls, centralized administration, and comprehensive audit trails.

Secure Audit Logging

Complete with digitally signed logs and key lifecycle activities, reducing audit costs, enhancing visibility, and accelerating operational efficiency.

Supported Cryptographic Algorithms

Such as AES, 3-Key Triple DES, HMAC, RSA, and ECDSA key types
TLS and on-demand backups with SSH key authentication, for secure administrator remote access

Custom Integrations

Simplified RESTful API interface for key CRUD (Create, Read, Update, Delete) operations and crypto
Supports open client libraries such as KMIP, OpenKMIP and PyKMIP
Conforms with KMIP 1.0 through 2.1 specifications
Implements auto-registration with native XML-based KMS protocol
NIC Teaming Support

Pre-Installed Software

Comprehensive monitoring, recovery, scheduled backups, log rotations, and restore functionality
Web browser GUI and Command Line Interface supported
SNMP alerts and SIEM log monitoring
TLS and on-demand backups with SSH key authentication, for secure administrator remote access

Deployment Options

Enterprise Secure Key Manager provides easy deployment and licensing processes. It can be effortlessly installed and configured ; simply drop in as hardware or virtual appliance. Access transparent client licensing, with no hidden costs attached to key volume or scalability.

ESKM Product	Deployment Type	FIPS Security	Embedded HSM
ESKM L1	Virtual appliance	FIPS 140-2 Level 1	n/a
ESKM L2	1U appliance	FIPS 140-3 Level 2 (certification pending)	No
ESKM L3	1U appliance	FIPS 140-2 Level 3 (via FIPS-certified embedded HSM)	Utimaco GP HSM
ESKM L4	1U appliance	FIPS 140-2 Level 4 (via FIPS-certified embedded HSM)	Utimaco GP HSM

You can enlarge this table to view it.

Virtual Enterprise Secure Key Manager (vESKM)

Easy Implementation of a virtual key management strategy with the virtual version of Enterprise Secure Key Manager.

Pre-configured and hardened security virtual appliance
Enables continuous local and remote access to your encryption keys
Fully integrable with Utimaco’s CC and VS-NfD certified HSM to protect keys at rest

Network Appliance

Physical Dimensions

Form factor

19”1U

Weight

ESKM L2 : 24.9 lbs (11.3kg)

ESKM L3/L4 : 27.8 lbs (12.6kg)

Size

W 19 in × D 26 in × H 1,75 in

(W 482.6 mm × D 660.4 mm × H 44.5 mm)

Electrical and Thermal Characteristics

Rated input voltage

100 to 127 VAC / 200 to 240 VAC

Rated input current

5 A – 3 A at 200 VAC

Rated input frequency

50 Hz to 60 Hz

Rated input power

350 W at 200 VAC

BTUs per hour

1195 BTU/hr (100/200 VAC)

Rated steady-state power

250 W at 100 VAC / 250 W at 200 VAC

Maximum peak power

400 W at 100 VAC (3 sec.)

Operating Environment

Operating temperature

32°F to 104°F (0°C to 40°C)

Operating relative humidity

5% to 95%, non-condensing

Connectivity

Communications ethernet

TCP/IP, TLS 1.2 (only)

Connection

10/100/1000BASE-T (RJ45) auto-sensing

Physical Security

Appliance security

Rack-mountable (1U), physically fortified,double-locking bezel, Medeco pick-resistant locks

Electrical security

Dual redundant power supplies, out-of-range temperature, and voltage detection

Controls

Power on/off switch, unit ID switch, LCD control panel

Certification / Compliance

Certifications

FIPS 140-2 Levels 1, 2, 3 and 4 (physical)**

Compliance

Meets NIST SP 800-131A Standards Compliant to CC EAL2+ Controls for PCI-DSS, HIPAA,EU data privacy laws,and other regional privacy mandates

Safety

UL/CUL, CE, TUV, BIS, BSMI, SII

Emissions

FCC Class B, VCCI, BSMI, C-Tick, IC, KCC

Environmental

RoHS, REACH