secunet eID PKI Suite uses electronic and biometric data to identify documents. Data stored on chips must be protected from manipulation and forgery, while at the same time, be protected by proper security mechanisms so the data can be accessed by people authorized to do so. secunet works with Thales Luna Network HSM and Luna PCI HSMs to provide cryptographic security to digital certificates and certificate services. Luna Network HSM uses a ‘keys-in-hardware’ approach to store keys that protects the entire key lifecycle within the FIPS 140-2 validated, tamper-proof appliance. Luna PCI is designed to accelerate sensitive cryptographic operations while protecting digital certificate services.