Hardware Security Module (HSM) | Key Management Solution

Protect your company's invaluable reputation by deploying a Hardware Security Module (HSM) to safeguard against cybersecurity threats.

Our Primus HSMs guarantee secure generation, storage, and management of digital identities, encryption keys, and digital signature keys. Managed directly or with our remote access device Decanus, Primus HSMs ensure top-tier redundant protection of all your digital assets.

Primus HSMs cover a wide range of performance levels, from entry-level to the highest performance requirements in a network appliance form factor, offering a performance-to-price ratio suitable for businesses of any size—whether in the cloud or on-premises.

Primus HSM series E and X are certified FIPS140-2 Level 3 and CC EAL 4+ EN 419221-5 eIDAS to match the highest industry standards.

Find the HSM tailored to your needs

Primus HSM CyberVault (X2 Models)

The Hardware Security Modules that combine performance and cyber security innovation

Over 50,000 transaction per second (tps)
Over to 1,000,0000 tps in cluster environment
Up to 30 GB storage space
Optical network connectivity
Hybrid signing operations

Discover Primus CyberVault X2 Models

Primus HSM CyberVault Core (E2 Model)

Next-Generation Cryptographic Protection at an Unmatched Performance/Price Ratio

Delivers full network appliance functionality at a cost of a PCIe environment
Hybrid signing operations
Optional 10 GB optical interfaces
240 MB storage space

Discover Primus HSM CyberVault Core (E2 Model)

Primus HSM X Series

Scalable and performant hardware for advanced
encryption standards and digital signatures

Up to 30 GB of storage space
Capability to perform over 1000 RSA-4096 signatures per second
Provides robust protection for blockchain and crypto currency environments

Discover Primus HSM X-Series

Primus HSM E series

Economical Hardware Security Module

Perfect for key management in PKI environments
Ideal for lower performance applications and when cost is a major factor
In-built high availability feature

Discover Primus HSM E-Series

From a few transactions per second (TPS) to 50,000 TPS and beyond in a single HSM, equipped to handle post-quantum computer threats (PQC). In clustered architectures, configurations support multi-million TPS environments.

Enjoy leading-edge key storage capabilities starting at 10 MB in the cloud, extending up to 30 GB within the HSM itself for storing millions of encryption and signature keys, with optional external storage.

Enable up to 1,000 flexible and independent partitions on a Primus X Cyber Vault for added scalability while reducing cost. Each partition acts as a separate, secure environment with its own cryptographic keys, users, policies and individual Decanus Remote Terminal access.

Choose between standard or CC mode in cloud instances. Pick geo-redundant local, regional, or global setups across multiple continents, ensuring clustered and continuous synchronization.

Decanus Terminal allows you to manage partition content autonomously, ensuring secure operations like backups and key invalidations directly by authorized users (2FA required).

Our Primus HSMs support diverse applications such as PKI, Key Management, IAM, PAM, Data Encryption, TLS Termination, Document/Code Signing, IoT, Smart Metering, and Crypto Custody, securely storing keys and executing crypto algorithms internally.

Remotely manage your HSM and user partition

Unique transaction security for financial and digital assets applications

Trusted and scalable verification of HSM keys and timestamps

Fortifying your encryption keys security with Smart Key Attributes - Patented SKA Technology

Explore our HSM-as-a-service solutions

Discover everything you need to know about Securosys Primus HSMs, from features and certifications to integration and key management best practices.

Do your HSMs have a clustering function?

Yes, Securosys Primus HSMs support clustering, allowing you to connect multiple HSMs to ensure high availability, load balancing, and failover capabilities for mission-critical applications without the need of software installed additionally.

How many HSMs would you recommend for a best-practice setup?

For optimal security and availability, the recommendation is to use at least two HSMs in a clustered configuration. This ensures redundancy and load balancing. Depending on your performance and availability needs, additional HSMs can be added for larger deployments.

Can the HSM be upgraded or scaled if my needs grow?

Yes, Securosys HSMs are designed for scalability. Depending on the chosen HSM model, one can either upgrade the performance of the existing HSM through a license upgrade or add an additional HSM to the cluster to enhance both performance and redundancy.

How do I integrate the Primus HSM with my existing applications?

Securosys Primus HSMs offer integration via different, fully documented API’s (PKCS#11, CNG, Java, REST) and integrate into any network environment, ensuring secure access for diverse applications in parallel.

Do you offer installation and integration support?

Securosys HSMs are designed for client self-installation after a short training. If required Securosys Partners or Securosys itself can provide integration support on request. See all our integrations here.

Does your HSM come with an SLA? If so, what is covered?

Yes, Securosys offers Service Level Agreements (SLAs) with its HSM solutions. The SLA covers availability, support response times, hardware maintenance, and security patches procedures. Depending on the chosen subscription level, different tiers of SLA coverage are available.

Does the Primus Cyber Vault support PQC?

Yes, in dedicated mode as well as in hybrid mode (in parallel with other curve or RSA algorithms – without performance impact). Multiple PQC algorithms are supported and the NIST PQC algorithms are even certified. Learn more about PQC here.