Thales background banner

Cloud HSM

Set up a Luna Cloud HSM and access an HSM on Demand service for your organization’s cryptographic operations.

Key vaults are a secure and trusted mechanism used to protect cryptographic keys and secrets. Use your Key Vault to generate and/or store cryptographic keys, establishing a common root of trust across all applications and services. Your key vault can also perform cryptographic operations such as encryption/decryption of Data Encryption keys, protection of secrets (passwords, SSH keys, etc.), and more.

The HSM on Demand Luna Cloud HSM service is a generic key vault that can be used for a wide variety of use cases where a specific Thales Data Protection on Demand (DPoD) service is not yet available. The Cloud HSM service can be used as a root of trust for the CipherTrust Manager virtual appliance, and other appliances, applications and services. It can also be used in conjunction with a growing list of proven integrations.

cloud hsmKey Features

  • Auditing features
  • Ability to design and enforce policies to ensure compliance
  • Features allow you to manage your keys across Salesforce and supported applications
  • Provides a service layer (GUI/API) to create key material


  • Ensures your data is always protected
  • Provides much needed policy enforcement
  • Includes essential audit capabilities
  • Reduces administration overhead
Choosing the Right Cloud HSM - Webinar

Choosing the Right Cloud HSM - Webinar

Join us as we discuss the complexities of managing native cloud HSMs separately, leading to islands of security with different features and rules for each.

Thales Data Protection on Demand Services - Solution Brief

Thales Data Protection on Demand Services - Solution Brief

Thales Data Protection on Demand is a cloud-based platform that provides a wide range of Cloud HSM and key management services through a simple online marketplace. With Luna Cloud HSM and CipherTrust Key Management services on Data Protection on Demand (DPoD), security is made...