{"product_id":"yubihsm-2-fips-140-3-v2-4","title":"YubiHSM 2 FIPS 140-3 v2.4","description":"\u003cp\u003eThe YubiHSM 2 FIPS 140-3 is a compact, cost-effective hardware security module that protects cryptographic keys across their entire lifecycle. It lets organisations generate, store and manage keys inside dedicated, tamper-resistant hardware, guarding them against both logical attacks and physical theft whether the keys are at rest or in use. In the \"nano\" form factor, it sits entirely within a USB-A port, making strong key protection practical for servers, appliances and edge deployments alike.\u003c\/p\u003e\n\u003ch3\u003eKey features\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eFIPS 140-3 validated\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003efor regulated and compliance-driven environments.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eExtensive cryptographic capability\u003c\/strong\u003e: RSA (2048\/3072\/4096-bit), ECC across multiple curves including ed25519, ECDSA, SHA-2 and AES-CCM key wrapping.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTamper-evident audit logging\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003ewith hash-chained, signed events for a verifiable record of every operation.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRole-based access controls\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003eacross separate security domains.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eM of N wrap key backup\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003erequiring multiple administrators to approve key recovery.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOn-chip True Random Number Generator\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003eseeding a NIST SP 800-90 AES-256 CTR_DRBG.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAsymmetric key attestation\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003esupport.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003e16 concurrent connections\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003ewith optional network sharing and remote management.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eMinimal footprint\u003c\/strong\u003e: 1 gram, fits flush in a USB-A port, with power draw of just 20mA average (30mA max).\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eNew in v2.4\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAsymmetric encryption-based backup functionality.\u003c\/li\u003e\n\u003cli\u003eBring Your Own Key (BYOK) support for multi-cloud environments.\u003c\/li\u003e\n\u003cli\u003eUpdated cryptographic library for RSA and ECC operations.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eCertificate authority protection\u003c\/strong\u003e: secures Microsoft Active Directory Certificate Services root keys and signing operations.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCryptocurrency security\u003c\/strong\u003e: protects exchange keys against emerging threats.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eIoT and edge\u003c\/strong\u003e: lets developers secure keys in demanding operating conditions.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eGeneral cryptographic operations\u003c\/strong\u003e: hardware-based signature generation and verification.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eTechnical specifications\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003eCryptographic algorithms\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eHashing: SHA-1, SHA-256, SHA-384, SHA-512\u003c\/li\u003e\n\u003cli\u003eRSA: PKCS#1v1.5 and PSS signing; PKCS#1v1.5 and OAEP decryption\u003c\/li\u003e\n\u003cli\u003eECC: ECDSA and EdDSA signing; ECDH decryption across secp224r1, secp256r1, secp256k1, secp384r1, secp521r1, bp256r1, bp384r1, bp512r1 and curve25519\u003c\/li\u003e\n\u003cli\u003eKey wrap: NIST AES-CCM (128, 192, 256-bit)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eStorage\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e256 object slots, 128KB total capacity\u003c\/li\u003e\n\u003cli\u003eUp to 127 RSA-2048 keys, 93 RSA-3072, 68 RSA-4096, or 255 elliptic curve keys\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003ePhysical\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eDimensions: 12mm x 13mm x 3.1mm\u003c\/li\u003e\n\u003cli\u003eWeight: 1 gram\u003c\/li\u003e\n\u003cli\u003eConnector: USB-A (USB 1.x Full Speed, 12Mbit\/s)\u003c\/li\u003e\n\u003cli\u003eIP68 rated (water and dust resistant), crush resistant, no batteries or moving parts\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eSoftware interfaces\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eMicrosoft CNG (KSP)\u003c\/li\u003e\n\u003cli\u003ePKCS#11 (Windows, Linux, macOS)\u003c\/li\u003e\n\u003cli\u003eNative C and Python libraries\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eOperating system support\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eLinux (CentOS 7, Debian 8-10, Fedora 28\/30\/31, Ubuntu 14.04-19.10)\u003c\/li\u003e\n\u003cli\u003eWindows (10, Server 2012\/2016\/2019)\u003c\/li\u003e\n\u003cli\u003emacOS (10.12-10.14)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWhat's included\u003c\/h3\u003e\n\u003cp\u003eAccess to the full YubiHSM Software Development Kit: YubiHSM Core Library (C, Python), YubiHSM Shell CLI, PKCS#11 module, Key Storage Provider for Microsoft, YubiHSM Connector, Setup Tool, and documentation with code examples.\u003c\/p\u003e\n\u003ch3\u003eCertifications\u003c\/h3\u003e\n\u003cp\u003eFIPS 140-3 validated. FCC, CE, WEEE and RoHS compliant.\u003c\/p\u003e","brand":"Yubico","offers":[{"title":"Default Title","offer_id":43033496059979,"sku":"101212","price":1620.0,"currency_code":"NZD","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0660\/0255\/0859\/files\/yubihsm-2-fips-567133.png?v=1773022345","url":"https:\/\/www.trustpanda.co.nz\/products\/yubihsm-2-fips-140-3-v2-4","provider":"Trust Panda New Zealand","version":"1.0","type":"link"}