Luna Cloud HSM for CyberArk provides a root of trust for CyberArk Privileged Access Security Solution’s top-level encryption key in an HSM.
Luna Cloud HSM for CyberArk generates and stores the server keys, providing private key protection and strong entropy for key generation for CyberArk Privileged Access Security Solution system keys.
Together, Luna Cloud HSM for CyberArk secures the master key that is used within the vault, and is hosted in a secure environment. Luna Cloud HSM for CyberArk mitigates the risk of the master key being exposed or compromised by protecting it in a secure vault.
Key Features
- Manages keys and certificates within carefully designed cryptographic boundaries
- Provides robust access control mechanisms
- Simplify security audits by following industry best practise for key security
Benefits
- Ensures that data protected by CyberArk Privileged Access Security Solution is always protected
- Enables policy enforcement
- Ensures keys are only used for their authorised purpose
- Reduces administration overhead
Thales Data Protection on Demand Services - Solution Brief
Thales Data Protection on Demand (DPoD) is a cloud-based platform that provides a wide range of Cloud HSM and key management services through a simple online marketplace. With DPoD’s extensive platform of Luna Cloud HSM, CipherTrust Key Management, payment, and partner-led...
CyberArk Privileged Access Security Solution with Thales HSMs - Solution Brief
Protecting privileged access management credentials presents one of the largest security risks an organization faces today. These access accounts allow control of an organization’s resources, disable security systems, and enable access to vast amounts of sensitive data....
CyberArk Digital Vault with Thales Luna HSM and Luna Cloud HSM - Integration Guide
This document guides security administrators through the steps for integrating a CyberArk Digital Vault with SafeNet Luna HSM or HSM on Demand Service. SafeNet HSMs come as on-premise hardware HSMs widely known as SafeNet Luna HSM and a cloud offering HSM on Demand Service ...
CyberArk Digital Vault Integration
Once the vault is installed, the server key can be generated on the service, where it is stored as a non-exportable key.