.png){kind=logo}
Supported Hardware Security Modules (HSMs)
The following table lists the Hardware Security Modules (HSMs) supported for each EJBCA deployment type. Supported integration methods include the PKCS#11 interface and REST APIs.
HSM Type | Software stack | SaaS | Cloud | Software Appliance | Hardware Appliance | Container Set |
Network HSMs integrated with REST APIs | ||||||
AWS Key Management Service (KMS) | ✔️ | ✔️ | ✔️ | ✔️ | ||
Azure Key Vault / MS Managed HSM | ✔️ | ✔️ | ✔️ | | | ✔️ |
Fortanix Data Security Manager (DSM) | ✔️ | | | | | ✔️ |
Securosys Primus HSM and CloudHSM Service | ✔️ | | | ✔️ | ✔️ | ✔️ |
Network HSMs integrated with PKCS#11 | ||||||
AWS CloudHSM | ✔️ | ✔️ | ✔️ | | | ✔️ |
Bull TrustWay Proteccio | ✔️ | | | ✔️ | ✔️ | ✔️ |
Crypto4A QxHSM | ✔️ | |||||
Entrust nShield Connect | ✔️ | | | ✔️ | ✔️ | ✔️ |
Thales DPoD | ✔️ | | | ✔️ | ✔️ | ✔️ |
Thales Luna 7 | ✔️ | | | ✔️ | ✔️ | ✔️ |
Thales TCT | ✔️ | | | ✔️ | ✔️ | ✔️ |
Utimaco CryptoServer | ✔️ | | | ✔️ | ✔️ | ✔️ |
Utimaco u.trust Anchor | ✔️ | | | ✔️ | ✔️ | ✔️ |
Internal Hardware Appliance PCIe HSMs integrated with PKCS#11 | ||||||
Thales Luna PCIe | ✔️ | ✔️ | ||||
Utimaco PCIe | ✔️ | ✔️ | ||||
USB HSMs integrated with PKCS#11 | ||||||
Thales Luna USB | ✔️ | |||||