Supported Hardware Security Modules (HSMs)
The following table lists the Hardware Security Modules (HSMs) supported for each EJBCA deployment type. Supported integration methods include the PKCS#11 interface and REST APIs.
HSM Type | Software stack | SaaS | Cloud | Software Appliance | Hardware Appliance | Container Set |
Network HSMs integrated with REST APIs | ||||||
AWS Key Management Service (KMS) | ||||||
Azure Key Vault / MS Managed HSM | | | ||||
Fortanix Data Security Manager (DSM) | | | | |||
Securosys Primus HSM and CloudHSM Service | |
|
| |||
Network HSMs integrated with PKCS#11 | ||||||
AWS CloudHSM | | | | |||
Bull TrustWay Proteccio | |
| | | ||
Crypto4A QxHSM | ||||||
Entrust nShield Connect | | | ||||
Thales DPoD | |
| | | ||
Thales Luna 7 | |
|
| |||
Thales TCT | |
| | |||
Utimaco CryptoServer | |
|
| |||
Utimaco u.trust Anchor | |
|
| | ||
Internal Hardware Appliance PCIe HSMs integrated with PKCS#11 | ||||||
Thales Luna PCIe |
| |||||
Utimaco PCIe |
| |||||
USB HSMs integrated with PKCS#11 | ||||||
Thales Luna USB |
| |||||
