What is an HSM? What makes Luna HSMs unique? A hardware security module (HSM) is a dedicated device that Always know the whereabouts of your keys is specifically designed for the protection of the cryptographic Securely isolate your cryptographic keys inside the tamper-resistant keys. HSMs act as trust anchors that protect the cryptographic hardware of the Luna HSM with our unique keys-in-hardware infrastructure of some of the most security-conscious organizations in approach. Knowing cryptography is only as strong as the security the world by securely managing, processing, and storing those keys afforded to your cryptographic keys, Luna HSMs are designed with inside a hardened, tamper-resistant device. the highest key security in mind. Applications communicate with the keys stored in the Luna HSM via a client – but keys never leave the HSM.
The need for a strong crypto foundation Meet your compliance needs Whatever your compliance needs may be, from GDPR and eIDAS A root of trust is the foundation of a cryptographic system. Digital to PCI-DSS and CCPA, Luna HSMs are part of the solution. Luna security is dependent on cryptographic keys that encrypt and HSMs offer the most certifications in the industry including Common decrypt data and perform functions such as signing and verifying Criteria, FIPS 140-2, ITI and more. Have complete trust in your signatures, and ensuring the integrity of those keys and the infrastructure, backed by a certified HSM cryptographic foundation cryptographic functions within a secure environment such as an that is internationally recognized. HSM is paramount. Key protection wherever your applications/workloads run Don't be tied to one specific location or cloud service provider Luna HSM-the foundation of digital trust and ensure key ownership and control with our on-premises and Protect your organization's devices, identities and transactions, and cloud-based solutions. Easily move your keys in and out of cloud build trust in the overall ecosystem with Thales Luna HSMs - the environments with Thales' Luna HSM hybrid solution. Additionally, foundation of digital trust for over 25 years. Don't compromise on dedicated Luna HSMs are available at major cloud service agility, usability or scalability with Luna HSMs, purposefully designed providers including Microsoft and IBM. to provide a balance of security and high performance for both Scale to meet high performance use cases traditional and emerging technologies. Additional benefits include: Meet high throughput requirements to satisfy your most demanding • Reduce risk. Protect your critical digital infrastructures with a applications and meet service level agreements. strong security architecture that is purpose built, certified, and crypto-agile. As an IT security professional, secure your data Easily manage and monitor HSM resources and identities with strong authentication and role separation, Manage your cryptographic resources with Thales Crypto and a keys-in-hardware approach. Command Center, a centralized platform that provides on-demand monitoring, reporting, provisioning and alerting in minutes. • Ensure flexibility and visibility. Strategic data and identity protection ensures flexibility and visibility by securing encryption Choose the HSM to meet your needs keys, critical data and digital identities wherever they may be. Benefit from a common architecture across all Luna HSMs. Perform • Easily install, provision and manage Luna HSMs. Meet SLAs the same crypto, leverage the same integrations, APIs, mechanisms and reduce downtime with streamlined operations. Designed and authentication methods, eliminate the need to design applications for today's lights out data centers, Luna HSMs are operationally around a specific HSM; and have the flexibility to move keys from graceful, reliable and centrally managed. form-factor to form-factor, wherever you may need them. • Simplify integration and development. With a wide variety of APIs, flexible deployment options and superior performance, Extend your return on investment you can quickly secure hundreds of applications with our out-of- Integrate with over 400 of the most commonly used enterprise the-box technology partner integrations. applications - the largest ecosystem of partners in the market. Additionally, we offer broad API support including PKCS #11, Java, PKI Certificate Signing & Validation Open SSL, Microsoft, Ruby, Python and Go. Document Signing
Secure your digital transformation
IOT
Secure Manufacturing Guard against evolving threats and capitalize on emerging Code Signing technologies including PKI, IoT, blockchain, code signing, Database Encryption cloud, quantum-safe crypto agility, 5G and more, with Thales' unparalleled combination of products and features. Post-Quantum Crypto Agility Luna HSMs Install and connect in modern data centers Transaction Processing Benefit from IPV6, optional 10G fibre connectivity, low power SSL/TLS requirements, and reduced TCO with remote management.
Smart Card Issuance
Blockchain
5G eIDAS
2 Thales general purpose HSM portfolio
Luna Network HSMs
Secure sensitive data and critical applications by storing, protecting and managing cryptographic keys in Luna Network HSMs - Thales' premium family of high-assurance, tamper-resistant, network-attached appliances offering market-leading performance. Meet compliance and audit needs for FIPS 140-2 Level 3, HIPAA, PCI-DSS, eIDAS, GDPR, and others, in highly-regulated industries including financial, healthcare and government.
Luna PCIe HSMs
Store, protect and manage cryptographic keys for sensitive data and critical applications in Luna PCIe HSMs - high- assurance, tamper-resistant, low-profile PCIe cards. Provide applications with dedicated access to a purpose-built, high-performance cryptographic processor. Quickly embed this cost-efficient solution directly into servers and security appliances for FIPS 140-2 Level 3-validated key security.
Luna USB HSMs
Maintain all key materials exclusively within the confines of Luna USB HSMs, delivering industry-leading key management in a portable appliance. The small form-factor and on-board key storage sets the product apart, making it especially attractive to customers who need offline key storage.
Luna Cloud HSM
Data Protection on Demand (DPoD) is a cloud-based platform that provides a wide range of on-demand Luna Cloud HSM and key management services through a simple online marketplace. With DPoD, security is made simpler, more cost effective and easier to manage because there is no hardware to buy, deploy and maintain. Just click and deploy the services you need, provision new tenants, add further services and get usage and audit reporting in minutes.
Crypto Command Center
Centralize your crypto management Luna Network HSM resources and reduce IT security infrastructure costs with Crypto Command Center - a complete monitoring, reporting and management tool for on-premises, hybrid and cloud environments.
ProtectServer HSMs Available in network attached and PCIe form factors, ProtectServer HSMs are designed to protect cryptographic keys against compromise while providing encryption, signing and authentication services. ProtectServer HSMs offer a unique level of flexibility for application developers to create their own firmware and execute it within the secure confines of the HSM.
Contact Thales Contact us to learn how more about Luna General Purpose HSMs and how they can help you protect applications using modern technologies, ensure your users, devices and infrastructure is secure, and how you can protect your data and digital identities regardless of the environment be it on-premises, in the cloud, or hybrid and multi-cloud.
Thales Hardware Security Modules Brochure 3
About Thales The people you rely on to protect your privacy rely on Thales to protect their data. When it comes to data security, organizations are faced with an increasing number of decisive moments. Whether the moment is building an encryption strategy, moving to the cloud, or meeting compliance mandates, you can rely on Thales to secure your digital transformation.
Decisive technology for decisive moments
Contact us For all office locations and contact information, please visit cpl.thalesgroup.com/contact-us
Supplemental Declaration of Erik Neuenschwander in Support of Apple Inc.'s Reply in Support of Motion To Vacate Order Compelling Apple Inc. To Assist Agents in Search
Supplemental Declaration of Erik Neuenschwander in Support of Apple Inc.'s Reply in Support of Motion To Vacate Order Compelling Apple Inc. To Assist Agents in Search
