Nitrokey HSM 2 secure key storage for PKI and CA applications

Description: Originally paid 127 Euro for this key. Was purchased for a project to be a Certificate Authority but never deployed Comes with a bonus USB-to-USB Pin Header right angle adapter to install it inside of a rack mount server on the motherboard. Mfr web site: https://www.nitrokey.com/products/nitrokeys What was previously only provided by expensive and proprietary hardware security modules(HSM) is now available as open hardware at an unbeatably low price from Germany. NitrokeyHSM reliably protects your cryptographic keys with encrypted backups, two-man rule as accessprotection and many other security features. With a USB interface, Nitrokey HSM is theideal solution for certificate infrastructures of any type and size. Operating PKI and CANitrokey HSM provides secure key generation,storage and management for public keyinfrastructures (PKI), certificate authorities(CA) and other central signing keys. Technicalsecurity features replace expensive organi-zational protection measures such as sto-ring keys in safe deposit boxes, and evenprotect keys for large and changing teams.Fulfilling ComplianceRequirements (e.g. PCI DSS)According to PCI DSS, keys that encrypt ordecrypt credit card data must be securelystored at all times. Nitrokey HSM is a funda-mental component that helps you to meetPCI DSS requirements and to achieve yourPCI DSS certification.Internet of Things (IoT) andProtecting Your own ProductsProtect your own hardware products usingNitrokey integration. Ideal for remote main-tenance and for ensuring productauthenticity.Securely Administrating ServersWith SSHSecurely store your SSH keys in the Nitrokeyat all times. Your key is PIN-protected andcannot be exported or stolen from theNitrokey.Encrypting EmailsYour private key can be stored securely inthe Nitrokey HSM for email encryption bymeans of S/MIME. Your keys are thusprotected against loss, theft and malware.Two-Man Rule as Access Protection /M-of-N Threshold SchemeIn order to gain access to the cryptographic keys, M of Nkey administrators must approve. A single person alonecannot obtain access. If an individual key administratoris unavailable, key access is still possible, provided atleast M key administrators are available. This meansthat your keys are always protected, even in large andchanging teams.Key administrators can either authenticate themselvesusing their own Nitrokey HSM (required for M-of-Naccess protection) or by means of a password. Remoteaccess is possible, so key administrators do not have tobe physically present in the same location.Built-in PKI FeatureThe built-in PKI feature can be used to sign keys whichwere generated in the Nitrokey. An external entity (e.g.CA) can check the authenticity, integrity and origin ofthe keys. The preinstalled root certificate from our part-ner CardContact makes it possible to create individualand valid device certificates for each Nitrokey HSM. Onrequest, an own root certificate can be used. A uniquedevice ID allows cryptographic verification of the Nitro-key HSM.Encrypted BackupsNitrokey HSM supports key backup to protect againstdata loss. The backups are encrypted with the devicekey encryption key (DKEK). Since the DKEK can onlybe imported to another Nitrokey HSM, backups arealways encrypted and cannot be decrypted outside of aNitrokey HSM.Key RestrictionEach key‘s use can be restricted (e.g. by algorithm,purpose, backup permissions). These restrictions aredetermined at the time of key generation and are validfor the entire life cycle of the key. This ensures com-pliance with allowed algorithms and with the correctcryptographic purpose.Applications Key

Price: 55 USD

Location: Dallas, Texas

End Time: 2024-11-05T17:05:43.000Z

Shipping Cost: 2 USD