Luna Cloud HSM for CyberArk provides a root of trust for CyberArk Privileged Access Security Solution’s top-level encryption key in an HSM.

Luna Cloud HSM for CyberArk generates and stores the server keys, providing private key protection and strong entropy for key generation for CyberArk Privileged Access Security Solution system keys.

Together, Luna Cloud HSM for CyberArk secures the master key that is used within the vault, and is hosted in a secure environment. Luna Cloud HSM for CyberArk mitigates the risk of the master key being exposed or compromised by protecting it in a secure vault.

Key Features

Manages keys and certificates within carefully designed cryptographic boundaries
Provides robust access control mechanisms
Simplify security audits by following industry best practice for key security

Benefits

Ensures that data protected by CyberArk Privileged Access Security Solution is always protected
Enables policy enforcement
Ensures keys are only used for their authorized purpose
Reduces administration overhead

Thales Data Protection on Demand Services - Solution Brief

Thales Data Protection on Demand (DPoD) is a cloud-based platform that provides a wide range of Cloud HSM and key management services through a simple online marketplace. With DPoD’s extensive platform of Luna Cloud HSM, CipherTrust Key Management, payment, and partner-led...

CyberArk Privileged Access Security Solution with Thales HSMs - Solution Brief

Protecting privileged access management credentials presents one of the largest security risks an organization faces today. These access accounts allow control of an organization’s resources, disable security systems, and enable access to vast amounts of sensitive data....

CyberArk Digital Vault with Thales Luna HSM and Luna Cloud HSM - Integration Guide

This document guides security administrators through the steps for integrating a CyberArk Digital Vault with SafeNet Luna HSM or HSM on Demand Service. SafeNet HSMs come as on-premise hardware HSMs widely known as SafeNet Luna HSM and a cloud offering HSM on Demand Service ...

CyberArk Digital Vault Integration

Once the vault is installed, the server key can be generated on the service, where it is stored as a non-exportable key.