IBM Cloud Hyper Protect Crypto Services
Single-tenant key management on FIPS 140-2 Level 4 HSMs where the customer holds the master keys.
- Provider
- ibm
- Kind
- Key management
- Category
- Security
- Also known as
- HPCS
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| cryptoApi | enum | kmip | pkcs11 | grep11 | key-management | no | — | inherited |
| envelopeEncryption | boolean | — | no | false | ▸ true |
| hsm | boolean | — | no | false | ▸ true |
| keyOwnership | enum | keep-your-own-key | no | keep-your-own-key | inherited |
| managed | boolean | — | no | true | ▸ true |
| rotationAutomated | boolean | — | no | false | ▸ false |
| rotationDays | integer | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "hyper-protect-crypto-services", component: "ibm-hyper-protect-crypto-services" }Certificate Management Servicealibaba-certificate-managementData Encryption Servicealibaba-data-encryption-serviceAWS Certificate Manageraws-acmAWS KMSaws-kmsAWS Payment Cryptographyaws-payment-cryptographyAWS Private Certificate Authorityaws-private-caAWS Secrets Manageraws-secrets-managerAWS Signeraws-signerAWS Systems Manager Parameter Storeaws-ssm-parameter-storeAWS CloudHSMcloudhsmArtifact Signingazure-artifact-signingAzure Cloud HSMazure-cloud-hsmAzure Dedicated HSMazure-dedicated-hsmAzure Key Vaultazure-key-vaultAzure Key Vault Managed HSMazure-managed-hsmAdvanced Certificate Managercloudflare-advanced-certificate-managerCloudflare Geo Key Managercloudflare-geo-key-managerCloudflare Keyless SSLcloudflare-keyless-sslCloudflare mTLS client certificatescloudflare-mtlsCloudflare Origin CAcloudflare-origin-caCloudflare Secrets Storecloudflare-secrets-storeCloudflare Universal SSLcloudflare-ssl-tlsBitwardenbitwardencert-managercert-managerCyberArk ConjurconjurDopplerdopplerEJBCAejbcaEntrust nShield HSMentrust-nshieldHashiCorp Vaulthashicorp-vaultHCP Vault Dedicatedhcp-vaultInfisicalinfisicalGeneric key managementkey-management1Password Connectonepassword-connectOpenBaoopenbaoSealed Secretssealed-secretsSmallstep step-castep-caThales Luna HSMthales-luna-hsmCertificate Authority Servicegoogle-certificate-authority-serviceCertificate Managergoogle-certificate-managerCloud External Key Managergoogle-cloud-ekm
and 13 more → Key management page# yaml-language-server: $schema=../../schema/component.schema.json # IBM Cloud Hyper Protect Crypto Services: "a dedicated key management service and Hardware # Security Module (HSM) that provides you with the Keep Your Own Key capability", built on # "FIPS 140-2 Level 4-certified hardware, the highest security level that is offered in the # industry" ("Overview - Standard Plan"). The customer loads the master keys and assigns the # administrators, so IBM Cloud administrators have no access. schemaVersion: "1" type: "component" id: "ibm-hyper-protect-crypto-services" kind: "key-management" provider: "ibm" docs: "https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-overview" aliases: ["HPCS"] defaults: managed: true hsm: true envelopeEncryption: true rotationAutomated: false properties: keyOwnership: type: "enum" values: ["keep-your-own-key"] default: "keep-your-own-key" cryptoApi: type: "enum" values: ["kmip", "pkcs11", "grep11", "key-management"]