How do I select a hardware security module for my business?

2021-09-02 05:00

Are there compliance requirements I must meet, such as PCI HSM? Do my applications require a specific cryptographic interface, such as PKCS #11, Java, or Microsoft CNG? How many different applications in my ecosystem require HSMs? Can I use multitenancy or HSM virtualization to reduce my overall rack footprint and cost?

Do my applications use public clouds such as AWS, Azure, or Google? If so, will a cloud HSM or cloud payment HSM meet my needs?

How should I structure my team? Should I focus their energy more on hands-on administration work, or on using vendor-provided tools to automate the process of HSM management?

The more applications you have that do encryption or digital signing, the greater the ROI you can achieve on an investment in HSMs. And that's exactly why a strong, diverse, well-supported and well-maintained technology partner ecosystem has become a top differentiator for HSM offerings.

Broad application support reduces security risk and maximizes ROI, and coupled with deployment flexibility and proven worldwide customer support are critical selection criteria to help position you for success with HSMs. Ambuj Kumar, CEO, Fortanix.

For decades, businesses in highly regulated industries have been locked into HSM appliances that are costly to operate, difficult to scale and lack the modern RESTful programming interfaces required by application developers to quickly bring new applications to market and migrate them to the public cloud.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/z8X4Qubs4bY/

#security