Utimaco HSM
Introduction
JIPDEC Seminar June 2017
Joerg HornDirector Business Development

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 1

 Part 1
 Introduction
 Utimaco
 History
 HSM
 HSM Produkt Portfolio Part 2
 eIDAS Signature Creation
 TimeStamping Outlook
Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 2

 About Utimaco
Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 3

Utimaco Hardware Security Modules- precision engineering for your security needsNo problem solver:
Secure communication

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 4

Utimaco: Facts and Figures
170+ Employees

1.000+ Installations

70% in R&D, Supportand Production

Fastest growing independent
HSM vendor
worldwide

Aachen, Germany
Headquarters~ € 40 Million
Revenue
Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 5

Utimaco: 25 years of experience in IoT security
2nd Gen HSM
CryptoServer
Series (Incl.
Sensor Foil)
2002

Foundation Utimaco
1983

1st Gen HSM
KryptoServer
1991

1997
1st AutomotiveApplication

Utimaco HSM Business Unit · Aachen, Germany · ©2016

2001
German Land
Registry Office

hsm.utimaco.com

US Electric Car Maker
2015
Office in USA Office inSingapore
2013„Deutschland“HSM2010

Market Leader in
Telecommunications
2006

TimeStampfor Lotteries
1999

1993
ZKA Approval

HSM Software
Simulator
2007
eID

Immigration
Control
2012

2008–2013
Sophos2008
Conditional
Access forPayTV

2004
Road Pricing
2006
HSM Software
DevelopmentKit

6th Gen HSM
2016

2014
Industrial IoT withleading Semiconductor

2011
SmartGrid
2013
Payment EFT POS forlarge Food Retailer

Page 6 About HSM
Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 7

Utimaco
HSM applications

Database
Encryption
Conditional
AccessAuthentification

RandomNumber
Generation

Signature
Creation /Document
Signing

KeyInjection

PKITime
Stamping

Utimaco HSM Business Unit · Aachen, Germany · ©2016

CodeSigning

hsm.utimaco.com

Page 8

Offload sensitive data operations from Apps to an HSM.

Crypto

Key
Mgmt

Users

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 9Trustworthy Cryptographical Resource
App1

App5

App2
CryptoKeys / FW

HSM

App4

TamperProtection

App3

API(P#11,JCE,CSP/CNG)

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 10

Utimaco: The Root of Trust

We keep yourcryptographic keys safe

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 11 Product Portfolio
Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 12

Utimaco Hardware Security Modules- precision engineering for your security needs

No problem solver:
Secure communication

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 13

Product Portfolio: CryptoServer
Hardware Security Modules
Se-Series
12/52/500/1500

PhysicalInterface

Certifications(* in progress)

PCIe
plug-in card

Networkattached

FIPS 140-2 Level 3,
CC EAL4+*
Based on CEN PP EN 419 221-5„Cryptographic Module for Trust Services“

CSe-Series
10/100PCIe
plug-in card

FIPS 140-2 L3 Phys.Sec. L4,
PCI HSM* (PCI PTS).
CC Attack Potential “High”,
Deutsche Kreditwirtschaft

CryptographicSupport(T)DES, AES, RSA, (EC)DSA, (EC)DH, SHA, …

OS

WIN / LINUX / AIX* (*Appliance only)

Utimaco HSM Business Unit · Aachen, Germany · ©2016hsm.utimaco.com

Networkattached

Page 14

Product Portfolio - Product Packages

Se-Series
12/52/500/1500

CSe-Series
10/100

SecurityServer(General Purpose HSM)

PKCS#11, JCE, MS CSP/CNG/SQL EKM, CXICryptoServer SDK /CryptoScript *Development Kit for CryptoServer Firmware Customization

TimestampServer

Signature Creation acc. RFC 3161, CTS API

More..

Free HSM Software Simulator (Win/Linux), PCI HSM /Payment Program (Free EFT POS API)

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 15

HSM market drivers
 Critical Infrastructure (backbone of a nation's economy, security, and health) Energy/Smart Grid
 Industry/IOT
 Government PKIs and application (ID cards, passport, health system,.) Finance Transportation
 Health System Secure Cloud Services
 Cryptographical services for all cloud architectures GDPR General Data Protection Regulation (EU) 2016/679. Applies from May 2018

 eIDAS EU Regulation on electronic identification and trust services, since July 2016

Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 16

Unique Benefits
 Unmatched capacity/scalability

 Full-functionality HSM simulator

 Internal and external key storage

 Cryptography, mgmt., logs, SDK, …

 Virtually unlimited #slots (partitions) Testing, training, integrations, …

 High performance Rapid product evaluations

 Highly configurable

 Lowest TCO
 Fixed-price policy, no hidden costs

 Configurable role-based access no extra charges

 Extended authentication (2FA, M:N)

 for algorithms (ECC etc), clients/hosts/tenants/partitions/ connections

 Best price/performance ratio

 Easy-to-use remote mgmt.

 Configurable hardening of crypto providers

 Best-in-class SDK
 Virtually unlimited number of FW modules

 No additional cost

 Script or C based SDK Backup of FW and user/key DB to disk
 FW update preserves keys
Utimaco HSM Business Unit · Aachen, Germany · ©2016

hsm.utimaco.com

Page 17

Utimaco
Selected integrations

Oracle 11g

Privileged
Identity
Management(PIM)

EJBCAOpen Source PKIMicrosoft
Active Directory
Certificate
Services (AD CS)

Microsoft
Extensible Key
Management(EKM)

Utimaco HSM Business Unit · Aachen, Germany · ©2016

PKI Solution

hsm.utimaco.com

Page 18