IBM Cloud Hyper Protect Crypto Services

ibmKey managementibm-hyper-protect-crypto-services

Single-tenant key management on FIPS 140-2 Level 4 HSMs where the customer holds the master keys.

Provider
ibm
Category
Security
Also known as
HPCS
Properties · 4 set by this component
propertytypevaluesrequiredkind defaultthis component
cryptoApi · component propertyenumkmip | pkcs11 | grep11 | key-managementno—inherited
envelopeEncryptionboolean—nofalse▸ true
hsmboolean—nofalse▸ true
keyOwnership · component propertyenumkeep-your-own-keynokeep-your-own-keyinherited
managedboolean—notrue▸ true
rotationAutomatedboolean—nofalse▸ false
rotationDaysinteger—no—inherited
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "hyper-protect-crypto-services", component: "ibm-hyper-protect-crypto-services" }
Other Key management products · 53
Certificate Management Servicealibaba-certificate-managementalibabacloudkey-managementData Encryption Servicealibaba-data-encryption-servicealibabacloudkey-managementAWS Certificate Manageraws-acmawskey-managementAWS KMSaws-kmsawskey-managementAWS Payment Cryptographyaws-payment-cryptographyawskey-managementAWS Private Certificate Authorityaws-private-caawskey-managementAWS Secrets Manageraws-secrets-managerawskey-managementAWS Signeraws-signerawskey-managementAWS Systems Manager Parameter Storeaws-ssm-parameter-storeawskey-managementAWS CloudHSMcloudhsmawskey-managementArtifact Signingazure-artifact-signingazurekey-managementAzure Cloud HSMazure-cloud-hsmazurekey-managementAzure Dedicated HSMazure-dedicated-hsmazurekey-managementAzure Key Vaultazure-key-vaultazurekey-managementAzure Key Vault Managed HSMazure-managed-hsmazurekey-managementAdvanced Certificate Managercloudflare-advanced-certificate-managercloudflarekey-managementCloudflare Geo Key Managercloudflare-geo-key-managercloudflarekey-managementCloudflare Keyless SSLcloudflare-keyless-sslcloudflarekey-managementCloudflare mTLS client certificatescloudflare-mtlscloudflarekey-managementCloudflare Origin CAcloudflare-origin-cacloudflarekey-managementCloudflare Secrets Storecloudflare-secrets-storecloudflarekey-managementCloudflare Universal SSLcloudflare-ssl-tlscloudflarekey-managementBitwardenbitwardenkey-managementcert-managercert-managerkey-managementCyberArk Conjurconjurkey-managementDopplerdopplerkey-managementEJBCAejbcakey-managementEntrust nShield HSMentrust-nshieldkey-managementHashiCorp Vaulthashicorp-vaultkey-managementHCP Vault Dedicatedhcp-vaultkey-managementInfisicalinfisicalkey-managementGeneric key managementkey-managementkey-management1Password Connectonepassword-connectkey-managementOpenBaoopenbaokey-managementSealed Secretssealed-secretskey-managementSmallstep step-castep-cakey-managementThales Luna HSMthales-luna-hsmkey-managementCertificate Authority Servicegoogle-certificate-authority-servicegcpkey-managementCertificate Managergoogle-certificate-managergcpkey-managementCloud External Key Managergoogle-cloud-ekmgcpkey-management
and 13 more → Key management page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# IBM Cloud Hyper Protect Crypto Services: "a dedicated key management service and Hardware
# Security Module (HSM) that provides you with the Keep Your Own Key capability", built on
# "FIPS 140-2 Level 4-certified hardware, the highest security level that is offered in the
# industry" ("Overview - Standard Plan"). The customer loads the master keys and assigns the
# administrators, so IBM Cloud administrators have no access.
schemaVersion: "1"
type: "component"
id: "ibm-hyper-protect-crypto-services"
kind: "key-management"
provider: "ibm"
docs: "https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-overview"
aliases: ["HPCS"]
defaults:
  managed: true
  hsm: true
  envelopeEncryption: true
  rotationAutomated: false
properties:
  keyOwnership:
    type: "enum"
    values: ["keep-your-own-key"]
    default: "keep-your-own-key"
  cryptoApi:
    type: "enum"
    values: ["kmip", "pkcs11", "grep11", "key-management"]

The same page as markdown, for an agent: /catalogue/components/ibm-hyper-protect-crypto-services.md