nShield Edge USB HSM kit - FIPS Level 2

nShield Edge USB HSM kit - FIPS Level 2
Availability: 7-14 days
£ 3189.24
(£ 3827.09 inc VAT)
Per Unit
£ 3189.24
Prices shown are per unit, excluding VAT and delivery.
Please contact us for volume and reseller pricing.
The nShield Edge HSM from nCipher is a portable USB-connected hardware security module designed to provide essential, secure cryptographic key generation and encryption facilities in a convenient, standards-based environment, and with an internationally-recognised security certification.

The nCipher nShield Edge FIPS Level 2 is ideally suited for use in smartcard PKI environments, for example to secure the root certificate authority keys in hardware, rather than relying on these being stored on disk within the server itself. The HSM is fully compatible with all common encryption management APIs including Microsoft CAPI and CNG as well as OpenSSL and PKCS#11, and supports all common crytographic algorithms.

The nShield Edge belongs to a family of HSMs that range from the low cost USB-connected versions to high-performance PCI card and network-connected devices. It comes complete with the nCipher Security World software for Windows, which provides a unified administrator and user experience, irrespective of the hardware model, and which guarantees interoperability and scalability, whether you deploys just one or dozens of HSMs.

The nShield Edge HSM is also suitable for many other encryption-related applications where hardware generation and storage of keys in a tamper-resistant environment is required for security, compliance or peace of mind. These include code signing, digital signature generation, IoT device protection and 'Bring Your Own Key' for cloud environments including Microsoft Azure, Amazon Web Services and Google Cloud Platform.

BYOK is supported out of the box with Microsoft Azure, and via a cloud option pack add-on for AWS and Google Cloud, which can be purchased separately.

Many other software applications can interface directly to the HSM using the provided API libraries, in order to improve key management and harden them from attack.

This FIPS 140-2 Level 2 HSM is ideal for most applications where a certified hardware security module is required. The same hardware is also available in a FIPS 140-2 Level 3 certified version for high assurance applications, and a Developer edition, which comes without certification but which otherwise has identical features.

Higher-performance security requirements, including 'Hold Your Own Key' for real time encryption of cloud data, can be met by the nShield Solo PCI-Express card, for individual servers, or the nShield Connect network HSM.

Comes with six standard nShield smartcards, one year's standard support and nShield Security World for Windows software CD. Additional Linux software, ECC license, multiple cloud integration pack and extended support are all available as add-ons - please contact us for details.

Please note that these are ordered on demand once customer details are verified, and can only be delivered to selected countries due to UK export license requirements. Please contact us for advice if needed.

nShield Edge USB HSM kit - FIPS Level 2

Technical Specifications

Kit components
- nShield Edge HSM and smart card reader
- USB cable
- 6 nShield smart cards
- nShield Security World for Windows software on CD

Physical module
Dimensions: 4.7" x 4.6" x 1" (120 x 118 x 27mm)
Weight: 0.8lb (340g)
Operating Temperature: 41 to 113degF (5 to 45degC)
Operating Humidity: 10-85% (non-condensing)
Storage Temperature: -40 to 158degF (-40 to 70degC)
Power Supply: 5V USB powered
Power Consumption: 700mW
Tamper window displaying Thales logo hologram

Mode button
Clear button
Smart card slot
Mode LEDs: red, amber, green
Card slot LED: green
Status LED: blue
USB (1.x or 2.x) type B port

Signing performance for 2048 bit RSA: 2 transactions per second
Signing performance for 4096 bit RSA: 0.2 transactions per second

Management and monitoring
Remote unattended operator or multi-user access control
Secure audit logging
Syslog diagnostics support
Windows performance monitoring
SNMP monitoring agent

Supported cryptographic algorithms
Asymmetric: RSA, Diffie-Hellman, EC-MQV*, DSA, El-Gamal, KCDSA°, EC-DSA*, EC-DH*, Edwards (X25519, Ed25519ph)
Symmetric: AES, Arcfour, ARIA°, Camellia, CAST, DES, MD5 HMAC, RIPEMD-160 HMAC, SEED°, SHA-1 HMAC, SHA-224 HMAC, SHA-256 HMAC, SHA-384 HMAC, SHA-512 HMAC, Tiger HMAC, Triple DES
Hash/message digest: MD5, SHA-1, SHA-2 (224, 256, 384, 512 bit), HAS-160°, RIPEMD-160
Full Suite B implementation* with fully licensed ECC, including Brainpool and custom curves
Note: * items are subject to additional ECC activation license, ° items are subject to additional KCDSA activation license.

Operating System support
Microsoft Windows 10 x64 and 7 x64
Windows Server 2016 x64, 2012 x64, 2008 R2 x64
Linux Enterprise: Red Hat AS/ES 6 x64 or x86 , 7 x64; SUSE 11 SP2 x64, 12 x64; Oracle 6.8 x64, 7.1 x64 (with additional Security World software)

PKCS#11, OpenSSL, Java (JCE), Microsoft CAPI and CNG, nCore, nShield Web Services Crypto API

Compliance / Certification

Warranty: 1 year manufacturer's warranty
Manufacturer's name: nShield Edge FIPS140-2 Level 2 edition
Manufacturer link: https://www.ncipher.com/products/general-purpose-hsms/nshield-edge

Manufacturer: nCipher

Got an enquiry?

Email sales@smartcardfocus.com or call us on:
+44 (0)1428 685250

Call us