Root Key Hardware Security Module

Overview

The Luna CA⁴ addresses the security and operational needs required to maintain the integrity of PKIs with true hardware key management, trusted path multi-person authentication, and direct hardware-to-hardware backup. Featuring comprehensive key management technology, under review for FIPS 140-2, Level 3 validation and PKCS#11 compatibility, Luna CA⁴ is the trusted choice and de facto standard for Root Key protection.

Solutions

Luna CA⁴ offers the strictest hardware security for Certificate Authorities (CA) issuing digital identities in PKIs. Luna CA⁴, under FIPS 140-2, Level 3 review, protects the PKI root key and performs all key management, key storage, and key operations (such as digital signing) exclusively within hardware. Comprehensive security policies, split user roles, and two-factor, trusted path authentication prevent unauthorized access to critical root keys. Direct hardware-to-hardware backup permits auditable backups of key material for backup and disaster recovery. Tight integration with leading Certificate Authority software, including Microsoft Certificate Services and Entrust Authority, makes it easy to add security and integrity to enterprise PKI.

Highlights

• Most Secure
  Keys are 3DES encrypted, encoded with M of N encryption, and stored on a tamper-proof hardware security token to ensure their integrity.
  • Secure Key Storage
    Keys are 3DES encrypted, encoded with M of N encryption, and stored on a tamper-proof hardware security token to ensure their integrity. Luna CA⁴ also securely supports all ECC Suite B algorithms.
  • Two-factor Trusted Path Authentication
    True two-factor, trusted path, multi-person authentication of HSM administrative users to prevent unauthorized access to sensitive HSM administration functions.
  • FIP 140-2, Level 3 Validation (in process) for Root Key Protection
    Luna CA⁴ is in the process of FIPS 140-2, Level 3 validation to meet Recommended Industry Best Practices to provide the highest levels of security.
• Easy Hardware Key Management
  Hardware-based key lifecycle management from generation, verification, storage, and backup. All key operations are performed exclusively within hardware to prevent unauthorized access to your keys.
• Easy Integration
  Luna CA⁴ offers unparalleled support and integration, offering full integration with the most popular Certificate Authorities, including Microsoft Certificate Services, Entrust Authority, VeriSign, and many more. Support for PKCS#11 Open API and Microsoft CryptoAPI allow easy integration with your custom solutions. In addition, existing Luna CA³ models can be easily migrated to the Luna CA⁴.