Banner Default Image

Hardware Security Modules (HSMs)

What is a Hardware Security Module?


A hardware security module (HSM) is a dedicated crypto processor that is specifically designed for the protection of the crypto key lifecycle. Hardware security modules act as trust anchors that protect the cryptographic infrastructure of some of the most security-conscious organizations in the world by securely managing, processing, and storing cryptographic keys inside a hardened, tamper-resistant device.

Why Use Hardware Security Modules?

Enterprises buy hardware security modules to protect transactions, identities, and applications, as HSMs excel at securing cryptographic keys and provisioning encryption, decryption, authentication, and digital signing services for a wide range of applications.

What Makes Thales the Best HSM Vendor?

Thales Hardware Security Modules provide the highest level of security by always storing cryptographic keys in hardware. Thales HSMs provide a secure crypto foundation as the keys never leave the intrusion-resistant, tamper-evident, FIPS-validated appliance. Since all cryptographic operations occur within the HSM, strong access controls prevent unauthorized users from accessing sensitive cryptographic material. Additionally, Thales also implements operations that make the deployment of secure HSMs as easy as possible, and our HSMs are integrated with Thales Crypto Command Center for quick and easy crypto resource partitioning, reporting and monitoring.

Thales HSMs adhere to rigorous design requirements and must pass through stringent product verification testing, followed by real-world application testing to verify the security and integrity of every device.

Thales HSMs are cloud agnostic, and are the HSM of choice for Microsoft, AWS and IBM, providing a “rentable” hardware security module (HSM) service that dedicates a single-tenant appliance located in the cloud for customer cryptographic storage and processing needs.

With Thales?Hardware Security Modules, You Can:

  • Address compliance requirements with solutions for Blockchain, GDPR, IoT, paper-to-digital initiatives, PCI DSS, digital signatures, DNSSEC, hardware key storage, transactional acceleration, certificate signing, code or document signing, bulk key generation, data encryption, and more.
  • Keys are generated, and always stored in the intrusion-resistant, tamper-evident, FIPS-validated appliance, providing the strongest levels of access controls.
  • Create partitions with a dedicated Security Office per partition, and segment through admin key separation.

Read our white paper

Thales Luna General Purpose HSMs:

Available in a wide range of form factors and performance options, Thales Luna General Purpose HSMs safeguard the cryptographic keys used to secure transactions, applications, and sensitive data.

Thales Luna Network HSM

Thales Luna Network HSM

Thales Luna Network HSM?is a network-attached HSM protecting encryption keys used by applications in on-premises, virtual, and cloud environments. Thales Luna Network HSMs are both the fastest and most secure HSMs on the market. Increase your return on investment by allowing multiple applications or business units to share a common HSM platform.


Thales Luna PCIe HSM

An embedded HSM,?Thales Luna PCIe HSM?protects cryptographic keys and accelerates sensitive cryptographic operations. The ideal solution for dedicated performance or application security use cases.


Thales Luna USB HSM

Thales Luna USB HSM?is an USB-attached HSM that is ideal for storing root cryptographic keys in an offline key storage device. Easy implementation for proof of concepts.

Thales Backup HSM

Thales Luna Backup HSM

Maintaining keys in hardware throughout their life-cycle is a best practice mandated by system security auditors and certification bodies responsible for attesting to the security status of cryptographic systems.

The Thales Luna Backup HSM ensures your sensitive cryptographic material remains strongly protected in hardware even when not being used. You can easily backup and duplicate keys securely to the Thales Luna Backup HSM for safekeeping in case of emergency, failure or disaster.

Thales ProtectServer - Image

Transaction Security with Thales Hardware Security Modules

Thales?Payment Hardware Security Modules?support the security needs of retail payment processing environments, internet payment applications, and web-based PIN delivery.

Thales Payment HSM - Image

Thales Luna Payment HSM

Thales Luna Payment Hardware Security Modules (HSMs)?are network-attached HSMs designed for retail payment system processing environments for credit, debit, e-purse and chip cards, as well as internet payment applications.

Thales ProtectServer External - Image

Thales ProtectServer HSM

Available in network attached and PCIe form factors,?Thales ProtectServer Hardware Security Modules (HSMs)?are designed to protect cryptographic keys against compromise while providing encryption, signing and authentication services to secure Java and sensitive web applications.

Thales ProtectServer HSMs offer a unique level of flexibility for application developers to create their own firmware and execute it within the secure confines of the HSM. Known as functionality modules, the toolkits provide a comprehensive facility to develop and deploy custom firmware.

crypto command center

Thales Crypto Command Center

Managing hardware security modules virtually is now not only possible, but easy for administrators. With?Thales Crypto Command Center, organizations easily provision and monitor crypto resources for their Thales Luna Network HSMs and reduce IT infrastructure costs.

Combining Thales Crypto Command Center with our Thales HSMs, IT departments can leverage a crypto hypervisor to deliver on-demand, elastic cryptographic services for data protection via cloud environments.

Thales Data Protection On Demand

Thales Data Protection On Demand

A cloud-based platform that provides a wide range of on-demand HSM, key management and encryption services through a simple online marketplace. Thales Data Protection On Demand helps enterprises:

  • Reduce infrastructure costs
  • Easily manage security
  • Shorten time to market

Just click and deploy the data protection services/tiles you need, provision new tenants, add further services and get usage and audit reporting in minutes.

Quantum Risk - Icon

Post-Quantum Risk Assessment

In just 5 minutes you will gain a better understanding of your organization's post-quantum breach risk.

Thales HSMs Play Well with Others

A broad range of innovative technology partners utilize SafeNet Hardware Security Modules as roots of trust, relied upon to secure sensitive data, transactions, applications, and more around the world.

HSM Partner - aws
HSM Partner - box
HSM Partner - IBM
HSM Partner - Microsoft
HSM Partner - Oracle


Explore Our Integrations


Risk management strategies for digital processes with HSMs

Business and governmental entities recognize their growing exposure to, and the potential ramifications of, information incidents, such as: Failed regulatory audits Fines Litigation Breach notification costs Market set-backs Brand injury And even business failure As a...

HSM True Hardware-based Key Management Next Gen PKI Apps - Brochure

HSM True Hardware-based Key Management Next Gen PKI Apps - Brochure

A hardware security module (HSM) is a dedicated crypto processor that is specifically designed for the protection of the crypto key lifecycle. Hardware security modules act as trust anchors that protect the cryptographic infrastructure of some of the most security-conscious...

NASDAQ OMX - HSM - Case Study

To deliver a cloud solution that is viable for the financial services market, NASDAQ OMX needed to ensure a host of stringent security policies and compliance mandates would be addressed. By leveraging Thales HSMs, NASDAQ OMX has been able to provide maximum security of the...

大香伊在人线国产观看?大香伊在人线综合 大萫焦视频