HSM (Hardware Security Module)

An HSM (Hardware Security Module) is a dedicated physical device for the secure generation, storage and management of cryptographic keys. Certified to strict standards (FIPS 140-2/3 level 3 or 4, Common Criteria EAL4+), it guarantees that keys never leave the hardware in plain text. Qualified providers operate HSMs for the management of qualified signature and time-stamping keys. Cloud signatures rely on HSMs hosted by the provider.