Supported Hardware Security Modules (HSMs)
The following table lists HSM support for each SignServer deployment option. Integration methods include PKCS #11 standard and REST APIs. SignServer additionally supports software-based keys for lower security requirements or development.
pqc : Indicates PQC algorithm support.
HSM Type | Software stack | Cloud | Software Appliance | Hardware Appliance | Container Set |
Network HSMs integrated with REST APIs | |||||
Azure Key Vault / MS Managed HSM |
| | | ||
Fortanix Data Security Manager (DSM) pqc |
| | |
| |
Securosys Primus HSM and CloudHSM Service |
| ||||
Network HSMs integrated with PKCS#11 | |||||
AWS CloudHSM |
|
| | | |
Bull TrustWay Proteccio |
|
| | ||
CloudHSM Service |
| ||||
Entrust nShield Connect/5c pqc |
|
| | ||
Securosys Primus |
| ||||
SoftHSMv2 |
|
| |||
Thales DPoD |
| | |||
Thales Luna 7 pqc |
| ||||
Thales USB HSM |
| ||||
Thales TCT |
|
| | ||
Utimaco CryptoServer |
|
| |||
Utimaco u.trust Anchor pqc |
|
| | ||
Internal Hardware Appliance PCIe HSMs integrated with PKCS#11 | |||||
Thales Luna PCIe |
|
| |||
Utimaco PCIe |
|
| |||
