Primus X-Series | High-Performance HSM for Encryption & Key Management

Ensuring the security of your company's digital assets has become a paramount concern in today's technological landscape. Whether it's safeguarding classified documents, protecting financial resources, or securing personal identities, you face the constant challenge of preventing unauthorized access and manipulation. Additionally, operational security is crucial, encompassing protection against external intrusions and ensuring the continuous availability of online services. As you navigate these complexities, finding a robust solution that addresses your specific security needs becomes increasingly vital.

Solution

The Primus X-Series HSM offers top-tier security solutions tailored to your needs. It ensures swift and efficient operations up to 1000 RSA-4096 TPS (transactions per second). Its robust architecture enables storage of over 1 million keys across 120 partitions, each with a 240MB capacity.

Beyond key management, it handles authentication, encryption, and more, while allowing you to set up clusters yourself, offering geo-redundancy and load balancing. Partitioning allows support for multiple applications simultaneously, providing a scalable and personalized security solution. With the Primus X-Series HSM, you will confidently navigate IT security challenges, knowing your digital assets are safeguarded according to your needs.

X-Series HSMs offer integration via different, fully documented API’s (PKCS#11, CNG, Java, REST) and integrate effortlessly into any network environment, ensuring secure access for diverse applications in parallel.

Primus HSMs support a wide range of cryptographic algorithms, including symmetric (like AES, 3DES), asymmetric (like RSA), cryptographic hash algorithms (like SHA-2, SHA-3), and is upgradeable to post quantum computer-resistant algorithms, ensuring robust security for diverse encryption needs.

There's no limit to the number of users and clients that can securely access the Primus X-Series HSM, ensuring effortless expansion for your organization.

With up to 120+ partitions and 30GB storage space, the Primus X-Series HSM can securely store hundreds of thousands key objects, enabling efficient data management with key protection inside the HSM itself.

With a user-friendly setup wizard, Primus X-Series HSM offers quick setup, easy configuration and operation, reducing setup time and lowering operational and maintenance costs.

Ensure data integrity during transport, storage, and operation with advanced tamper protection that exceeds FIPS and Common Criteria standards. Active tamper sensors protect even when the HSM is unpowered, triggering alerts on any manipulation attempt.

Enclosed in a heavy aluminum casing and shielded cryptographic core, the Primus X-Series HSM offers robust protection against side-channel attacks and minimizes electromagnetic radiation for enhanced security.

True Random Numbers Generation (TRNG

High-entropy encryption keys are paramount to provide the highest security. The Primus X-Series HSM has multiple true random number generation (TRNG) modules. They are built up with separate hardware components and get their randomness from different physical noise mechanisms.

Crypto-Agile Architecture

Due to its dynamic architecture, the Primus HSM is quantum computer ready. Should quantum computers make any of the supported algorithms to become obsolete, then a quantum computer safe algorithm may be installed through a firmware upgrade.

API Integration and built-in security

Primus HSM provides a variety of APIs for secure integration and communication, supporting automatic failover, load balancing, and prioritization. High availability and clustering are built-in features, requiring no extra software or cost.

Swiss Made

Crafted entirely in Switzerland, Securosys Primus HSMs embody unmatched quality and reliability. Free from external influences, our Swiss-made HSMs guarantee the highest standards from development to production, ensuring unparalleled security solutions.

The Primus X-Series HSM provides secure key generation, storage, and management, ensuring the integrity and confidentiality of cryptographic keys essential for PKI and KMS environments.

Safeguard the entire certificate lifecycle, from issuance to revocation, with the Primus X-Series HSM, ensuring trust and authenticity in digital communications.

Secure blockchain operations by leveraging the Primus X-Series HSM to protect private keys and ensure the authenticity of blockchain transactions. Learn more

Enhance the security of smart metering systems by using the Primus X-Series HSM to securely store and manage cryptographic keys, ensuring the accuracy and integrity of metered data. Learn more

The Primus X-Series HSM offers secure key storage and management, critical for safeguarding crypto assets.

Ensure secure identity verification and access control by using the Primus X-Series HSM to manage cryptographic keys that protect sensitive user credentials and privileged access.

The Primus X-Series HSM enables secure cloud operations by managing keys used in Bring Your Own Key (BYOK) scenarios, external key stores, and other cloud-based encryption services.

Maintain the integrity and authenticity of software and documents with the Primus X-Series HSM, which securely manages the cryptographic keys used in signing processes.

Comply with European and Swiss digital signature regulations by using the Primus X-Series HSM to securely manage Qualified Signature Creation Devices (QSCD) for eIDAS and ZertES operations.

Protect sensitive data within databases by using the Primus X-Series HSM to manage encryption keys, ensuring data remains secure both at rest and in transit.

Securosys Authorization App

Fast, Reliable, and Secure Approvals Anytime, Anywhere.

Authorize cryptographic tasks like signing, decrypting, unsealing, and modifying keys — right from your smartphone. Download the app now.

GetItOnGooglePlay_Badge_Web_color_English

Download_on_the_App_Store_Badge_DE_RGB_blk_092917-cropped

Security Features

Networking Features

Technical Data

Security Features

Multi-barrier software and hardware architecture with supervision mechanism

128/192/256-Bit AES with GCM-, CTR-, ECB-, CBC-, MAC Mode
Camellia, 3DES (legacy), ChaCha20-Poly1305, ECIES
RSA 1024-8192, DSA 1024-8192
ECDSA 224-521, GF(P) arbitrary curves (NIST, Brainpool,...)
ED25519, Curve25519
Diffie-Hellman 1024, 2048, 4096, ECDH
SHA-2/SHA-3 (224 - 512), SHA-1, RIPEMD-160, Keccak
HMAC, CMAC, GMAC, Poly 1305
Post-Quantum Cryptographic (PQC) algorithms option CRYSTALS-Dilithium, CRYSTALS-Kyber, SPINCS+

Two hardware true random number generators (TNRG)
NIST SP800-90 compatible random number generator

Key capacity: up to 30 GB
Up to 120 partitions @ 240 MB secure storage

Number of client connections not restricted
Unlimited number of backups

Several sensors to detect unauthorized access
Active destruction of key material and sensitive data on tamper
Transport and multi-year storage tamper protection by digital seal

Cryptographic evidence of audit relevant parameters (keys, configuration, hardware, states, logs, time-stamping)

Multiple security officers (m out of n)
Identification based on smart card and PIN

Networking Features

Technical Data

Model	RSA 4096	ECC 256	ECC 521	AES 256
X1000	1000	3000	550	5000
X400	400	3000	550	2000

Power supply:
- 100 ... 240 V AC, 50 ... 60 Hz
- 36 ... 75 V DC

Power dissipation: 60 W (typ), 80 W (max)
Ultra capacitors for data retention
Backup lithium battery: Lithium Thionyl Chloride 0.65g Li, IEC 60086-4, UL 1642, 3.6V

4 Ethernet RJ-45 ports with 1 Gbit/s (rear) 1
RS-232 management port (front)
1 USB management port (front)
3 Smart card slots

3 slots for Securosys Security smart cards
4 LEDs for system and interface status (multicolor)
1 liquid crystal display for management information
Console interface
Optional Decanus Terminal for remote administration

EMV/EMC: EN 55022, EN 55024, FCC Part 15 Class B
Safety: IEC 62368-1

Temperature ranges (IEC 60068-2-1 Ad, IEC 60068-2-2 Bd): storage -25 ... +70 °C; operation 0 ... +40 °C,
recommended 1 ... +30 °C
Humidity (IEC 60068-2-78 Cab): 40 °C, 93% RH, non-condensing
MTBF at tamb=25 °C: 100 000 h
Dimensions (w×h×d) 440 x 88 x 441 mm
(2U 19" EIA standard rack)
Weight 13.5 kg