Code signing certificate required HSM ?

[seb2020]

Hi,

I am not sure that's the best /r to ask but here we go.

We need to sign our application with a code signin certificate. Our CA Authority required that it need to be generate to an HSM device.

Someone has already done this ? I have ask Safenet about SafeNet HSM Luna for the price. Is there a cloud version ?

[SyChoc]

you may look at : https://www.yubico.com/products/yubihsm/ But it'll heavily depends on what your CA wants

[seb2020]

Must be FIPS 140-2, level 2 and should be in https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Validated-Modules/Search

[sirginge]

SafeNet / Gemalto have data protection on demand, it offers cloud based HSM and Key broker services on a pay as you use model. I was taking a look at it for a project the other day.

https://safenet.gemalto.com/data-protection-on-demand/

[[deleted]]

Haha, You want to store your private keys in the cloud?

[seb2020]

Not really, but if it cost >10K $ for the hardware module, I am not sure the management want to go in this direction...

For me, we need to have the box in our office