拥有密钥,而非 HSM
nShield as a Service 是一种基于订阅解决方案,它通过专用的 FIPS 140-2 3 级认证 nShield Connect HSM,生成、访问和保护加密密钥材料,使其与敏感数据分隔开来。 该解决方案兼具本地 HSM 的功能和云服务部署的优势,无需托管和维护设备。

迁移就绪或混合使用
Because nShield as a Service benefits from the same unique Security World architecture as on-prem nShield deployments, you can easily migrate your cryptographic operations from on-prem to the cloud, or use a hybrid approach, mixing both cloud-based and on-prem nShield HSMs for increased redundancy and reliability.

Simplify your migration
Looking for a pain-free migration without the hassle? The Entrust Cloud Concierge service delivers a seamless transition from your on-premises nShield HSM estate to nShield as a Service. Our Professional Services team will work with you to plan and execute the smooth migration of your existing keys, clients, and applications.

Adopt cloud-based RESTful APIs
Developing new cloud native applications and wishing to take advantage of efficient and dynamic scalability? Our nSaaS Web option allows you to easily access cryptographic resources with the flexibility that web services provide.
nShield as a Service 的优势
Regional data centers facilitate geo-fencing to meet cloud data security and data sovereignty mandates.
通过 FIPS 140-2 3 级认证保护您的业务关键型应用程序和数据,推动以云为中心的战略顺利进展。
Supports multi-cloud/hybrid deployments with the same consistent toolset. Flexibility to migrate workloads on premises or to another CSP.
CodeSafe 安全执行功能允许您按需访问组织在 HSM 中受保护的安全、敏感代码。
Choose the service and level that’s right for you
Basic, Standard, Premium or Enterprise as Self Managed or Fully Managed to meet your needs.
- Service Options
- Service Level
功能
BASIC
STANDARD
PREMIUM
企业
Service Features
Self Managed
Fully Managed
详情
- 单击选择...
技术规格
Connectivity
- IPsec tunnel w/pre-shared keys
- 处于客户云 IP 空间和专用的托管 nShield HSM 环境之间
- TLS tunnel to Web Services hosted on AWS (nSaaS Web Option)
- Transparent to client hosts
- 整条路径不受控制限制
Certified Hardware Solutions
nShield as a Service is built with nShield Connect HSMs, which help our customers to demonstrate compliance while also giving them the assurance that their HSMs meet stringent industry standards.
nShield Features
nShield as a Service delivers the same features as on-premises nShield HSMs, including CodeSafe, Web Services Option Pack, Container Option Pack and Database Option Pack.
Security Compliance:
- FIPS 140-2 3 级认证
Safety and Environmental Standards Compliance:
- UL、CE、FCC、RCM、加拿大 ICES
- RoHS2、WEEE
Data Center Certifications
云安全联盟 (CSA) 安全信任保障和风险 (STAR) 1 级
Wide Support for APIs, Cryptographic Algorithms and Platforms
支持的 API
- PKCS #11、OpenSSL、Java (JCE)、Microsoft CAPI/CNG 和 Web 服务
支持的加密算法
- 非对称公钥算法: RSA、Diffie-Hellman、ECMQV、DSA、KCDSA、ECDSA、ECDH、Edwards(X25519、Ed25519ph)、Secp256k1、
- 对称算法: AES、AES-GCM、ARIA、Camellia、CAST、RIPEMD160 HMAC、SEED、Triple DES
- 哈希/消息摘要: SHA-1、SHA-2(224、256、384、512 位)、HAS-160
- 完全的 Suite B(加密支持)实施以及获得完全许可的 ECC,包括 Brainpool 和自定义曲线
作为其标准功能集的一部分,nShield HSM 支持其中大多数加密算法。 如果组织要使用 ECC 或韩国算法,则需要其他可选的激活许可证。
支持的平台
Microsoft Windows 和 Linux 操作系统,包括 RedHat、SUSE 和其他主要云服务提供商发行的作为虚拟机使用或在容器中运行的发行版本。
方案部署
nShield as a Service is available in a range of options to meet the needs of your organization. For price sensitive customers a self-managed single HSM instantiation is available in the customer’s preferred location. Standard, Premium and Enterprise customers can specify preferred HSM locations to meet their operational, DR and data sovereignty needs while choosing the optimum performance and price point.
Self-Managed and Fully-Managed Features
Customer has remote access to dedicated nShield Connect hardware hosted in secure data centers
nShield 远程管理套件可实现您与基于云的 nShield HSM 之间的安全连接和交互
Maintenance & Support
- 服务监控
- 在年度或紧急维护期间应用经过预先测试的升级/补丁
- 全天候支持
Features Exclusive to Fully-Managed Service
- 实行安装过程全面管理
- Security Officer role fulfilled by trusted Entrust personnel
- Security World 创建
- HSM 注册
- 签约仪式
- 政策和流程制定
- 符合 ISO 27001 标准的政策和程序
- All operational staff BS7858 cleared (non-US data centers only)
- 在征得客户同意的情况下完成固件升级
Cloud Disaster Recovery
Increase redundancy and reliability of on-premises deployments.
- Subscription-based service
- Adds off-site HSM resources
- 操作方便、经济高效
听听我们客户的评价...

Square
We have a long history together and we’re extremely comfortable continuing to rely on Entrust solutions for the core of our business. We have used Entrust HSMs for five years and they have always been exceptionally reliable. We’ve layered a lot of code on top of the HSM; it delivers the performance we need and has proven to be a rock-solid foundation.
Verifone
As a global payment solutions and commerce enablement leader, Verifone’s strategy is to develop and deploy “best in class” payment solutions and services that meet or exceed global security standards and help our clients securely accept electronic payments across all channels of commerce. We selected Entrust HSMs to provide robust security, unmatched performance, and superior scalability across our payment security platforms…
Memjet
Entrust nShield 的销售团队在此评估期间提供了卓越的本地和远程支持,在整个过程中发挥了极大作用。 优异的产品文档深度、宽度和质量让我们相信,这个解决方案拥有充分的实力和强有力的支持。