← Back to glossary
🔒

HSM (Hardware Security Module)

Encryption

Secure Enclave Cryptographic Key Management Secrets Management Key Vault

Tamper-resistant hardware for secure key generation, storage, and cryptographic operations with strict controls and audit.

Definition

HSMs provide isolated key storage and cryptographic operations (signing, encryption) with strong access controls. They often support certifications and enforce policies like non-exportable keys.

In plain English Tamper-resistant hardware for secure key generation, storage, and cryptographic operations with strict controls and audit.

Why this matters

Why it matters: If keys are stolen, encryption may become meaningless; HSMs reduce key theft risk.

Example

Example: Use an HSM to protect code-signing keys or CA keys; automate rotation and enforce role separation.