The following table lists the Hardware Security Modules (HSMs) supported for each EJBCA deployment type. Supported integration methods include the PKCS#11 interface and REST APIs.
|
HSM Type |
Software stack |
SaaS |
Cloud |
Software Appliance |
Hardware Appliance |
Container Set |
|
Network HSMs integrated with REST APIs |
||||||
|
AWS Key Management Service (KMS) |
|
|
||||
|
Azure Key Vault / MS Managed HSM |
|
|
||||
|
Fortanix Data Security Manager (DSM) |
|
|
|
|||
|
Securosys Primus HSM and CloudHSM Service |
|
|
|
|||
|
Network HSMs integrated with PKCS#11 |
||||||
|
AWS CloudHSM |
|
|
|
|||
|
Bull TrustWay Proteccio |
|
|
|
|
||
|
Crypto4A QxHSM |
|
|
|
|
||
|
Entrust nShield Connect |
|
|
||||
|
Thales DPoD |
|
|
|
|
||
|
Thales Luna 7 |
|
|
|
|||
|
Thales TCT |
|
|
|
|||
|
Utimaco CryptoServer |
|
|
|
|||
|
Utimaco u.trust Anchor |
|
|
|
|
||
|
Internal Hardware Appliance PCIe HSMs integrated with PKCS#11 |
||||||
|
Thales Luna PCIe |
|
|
|
|
|
|
|
Utimaco PCIe |
|
|
|
|
|
|
|
USB HSMs integrated with PKCS#11 |
||||||
|
Thales Luna USB |
|
|
|
|
|
|