Utimaco CryptoServer CP5 (eIDAS & CC)

Utimaco CryptoServer CP5: the hardware security module CC certified eIDAS compliant

Utimaco CryptoServer CP5 supports Trusted Service Providers (TSPs) in meeting the policy and security requirements defined in various ETSI technical standards (ETSI EN 319 401, EN 319 411, EN 319 421). With key authorization capabilities, it is ideal for eIDAS-compatible remote signing and qualified signature creation. Other application areas include (qualified) certificate issuance, OCSP (Online Certificate Status Protocol), and time stamping. The CryptoServer CP5 is based on the CryptoServer Se Gen2 hardware platform and certified by Common Criteria in accordance with eIDAS Protection Profile (PP) EN 419 221-5 "Cryptographic module for trusted services". It is available as a plug-in PCIe card or as a network-attached device.

Common and eIDAS-compliant criteria

Full compliance at an attractive price.
For applications with lower to higher performance requirements.
Extensive remote management
Efficient key management and firmware updates via remote access
Automation of remote diagnostics via SNMP (Simple Network Management Protocol )
Dedicated software simulator for evaluation and integration testing

Features

API authorization key and tool ( according to PP EN 419 221-5)
Secure key storage and processing within the secure boundary of the HSM
Extensive key management with key authorization.
2-factor authentication with smart cards
“m out of n” quorum authentication (e.g. 3 of 5)
Multi-tenancy support
Management remote
Dedicated software simulator for evaluation and integration testing.
Supported operating systems: Windows and Linux
Multiple integrations with PKI applications, etc.
All features included in the product price.

Cryptographic algorithms

RSA, ECDSA with NIST curves and Brainpool.
ECDH with NIST and Brainpool curves
AES
CMAC, HMAC
SHA2-Family, SHA3
Generator of hash-based deterministic random numbers (DRG.4 acc. AIS 31)
True random number generator (PTG.2 acc. AIS 31)
Up to 3,000 RSA signature operations or 2,500 ECDSA in bulk processing mode
All algorithms included in the price of the product.

Safety and environmental compliance.

Safety, security, environmental compliance.
Common EAL4+ criteria, based on the protection profile of eIDAS EN 419 221-5
CE, FCC Class B
UL, IEC/EN 60950 -1
CB Certificate
RoHS II, WEEE

Application programming interfaces (APIs)

PKCS # 11
Cryptography Next Generation (CNG)
Cryptographic Extended Services Interface (CXI): Utimaco's high-performance interface ensures easy integration of cryptographic functionality in client applications

PCIe Card Physical Specifications

Half-Height and Full-Height Single-Lane PCI Express Card
Supports PCIe 1.1, PCIe 2.0 and PCIe 3.0 slots
Operating voltage: 3.3 V
3 V lithium battery, Ø 12 mm, length 600 mm, FDK CR 12600 SE or VARTA CR2NP
USB interface
Operating temperature: +10°C to +45°C (+50°F to +113°F)
Storage temperature: -10°C to +55°C (+14°F to +131°F)
Relative humidity: 10% to 95%, non-condensing
MTBF 360,000 hours at 25°C / 77°F

Network Device Physical Specifications

19 "1U form factor
Field replaceable redundant power supply: 2 x 100 ~ 240 V AC, 50 ~ 60 Hertz, 300 W
Power consumption: typically 45 W / 66 VA, max. 50 W / 70 VA
Heat dissipation: max. 171 BTU/h
2 RJ45 network interfaces 1 Gb/s
Operating temperature: +10°C to +50°C (+50°F to +122°F )
Storage temperature: -10°C to +55°C (+14°F to +131°F)
Relative humidity: 10% to 95%, non-condensing
MTBF 100,000 hours at 25°C / 77°F, GB ambient, GC - Ground Benign, Controlled

By market

By brand

language

Region