Cloud Hardware Security Module (HSM): Secure Your Data and Keys with HSM

Cloud Hardware Security Module

Industry-standard hardware security modules (HSMs) deployed on Alibaba Cloud.

Buy Now Buy Dedicated HSM Contact Sales

Overview
Product Selection
How It Works
Scenarios
Pricing
Documentation

Overview

Overview
Product Selection
How It Works
Scenarios
Pricing
Documentation

Protect Your Data On the Cloud and Meet Compliance Requirements

CloudHSM is built upon Hardware Security Modules (HSMs) validated by either China's State Cryptography Administration (SCA) or NIST (FIPS 140-3). CloudHSM provides comprehensive cloud-based cryptographic services, enabling you to manage your keys securely and reliably. You can leverage a wide range of cryptographic algorithms to perform robust encryption and decryption operations on your business data in the cloud.

Compliance

Uses HSMs that are FIPS 140-2 Level 3 validated to meet compliance requirements.

Authentication and Authorization

Separation of duties based on role-based access control. Alibaba Cloud monitors the health and network availability of the HSM hardware, and you fully control the HSMs and the generation and use of your encryption keys.

Elastic Scaling

Allows you to add or remove HSMs in the Alibaba Cloud Management Console based on your business requirements. You can also adjust configurations and specifications to meet specific encryption and decryption requirements.

{"moduleinfo":{"title":"Product Selection","des":"","width":"small"},"head":[{"text":"Aspect","row":"1","col":"1","highlighted":false},{"text":"Virtual HSM","row":"1","col":"1","highlighted":false},{"text":"Dedicated HSM","row":"1","col":"1","highlighted":false}],"list":[{"cell":[{"style":"text","text":"Positioning","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Provides tenant-isolated virtual HSM instances based on cloud HSMs certified by China's SCA or NIST (FIPS 140-2). Supports cloud data encryption and decryption services.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Provides dedicated physical HSMs certified by professional and authoritative institutions. Supports cloud data encryption and decryption services.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""}]},{"cell":[{"style":"text","text":"Performance","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Offers cryptographic performance and key capacity designed to meet the needs of general business applications.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Supports high-performance models for cryptographic computation, meeting the business requirements of large-scale application systems.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""}]},{"cell":[{"style":"text","text":"Use Cases","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"· Cryptographic evaluation for small- and medium-sized enterprises. · Integration with KMS where keys must be stored securely within an HSM.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":"","btn":""},{"style":"text","text":"· For enterprises expanding globally that require internationally certified HSMs. · For scenarios that require HSMs compliant with international financial payment interface standards.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":"","btn":"","linkUrl":""}]}],"$root":{"moduleinfo":{"title":"Product Selection","des":"","width":"small"},"head":[{"text":"Aspect","row":"1","col":"1","highlighted":false},{"text":"Virtual HSM","row":"1","col":"1","highlighted":false},{"text":"Dedicated HSM","row":"1","col":"1","highlighted":false}],"list":[{"cell":[{"style":"text","text":"Positioning","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Provides tenant-isolated virtual HSM instances based on cloud HSMs certified by China's SCA or NIST (FIPS 140-2). Supports cloud data encryption and decryption services.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Provides dedicated physical HSMs certified by professional and authoritative institutions. Supports cloud data encryption and decryption services.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""}]},{"cell":[{"style":"text","text":"Performance","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Offers cryptographic performance and key capacity designed to meet the needs of general business applications.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"Supports high-performance models for cryptographic computation, meeting the business requirements of large-scale application systems.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""}]},{"cell":[{"style":"text","text":"Use Cases","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":""},{"style":"text","text":"· Cryptographic evaluation for small- and medium-sized enterprises. · Integration with KMS where keys must be stored securely within an HSM.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":"","btn":""},{"style":"text","text":"· For enterprises expanding globally that require internationally certified HSMs. · For scenarios that require HSMs compliant with international financial payment interface standards.","hoverText":"","row":"1","col":"1","tdCustomBgColor":"","tdCustomColor":"","tdLeftLogo":"","downloadable":true,"downloadAddress":"","downloadIconStyle":"","btn":"","linkUrl":""}]}]},"$moduleId":"5585175010"}

Product Selection

Aspect	Virtual HSM	Dedicated HSM
Positioning	Provides tenant-isolated virtual HSM instances based on cloud HSMs certified by China's SCA or NIST (FIPS 140-2). Supports cloud data encryption and decryption services.	Provides dedicated physical HSMs certified by professional and authoritative institutions. Supports cloud data encryption and decryption services.
Performance	Offers cryptographic performance and key capacity designed to meet the needs of general business applications.	Supports high-performance models for cryptographic computation, meeting the business requirements of large-scale application systems.
Use Cases	· Cryptographic evaluation for small- and medium-sized enterprises. · Integration with KMS where keys must be stored securely within an HSM.	· For enterprises expanding globally that require internationally certified HSMs. · For scenarios that require HSMs compliant with international financial payment interface standards.

How It Works

Cloud Hardware Security Module (HSM) is a hosted service. You can deploy this service on Alibaba Cloud in an easy and cost-effective way. Alibaba Cloud manages and maintains HSMs.

Scenarios

Sensitive Data
Financial Payment
SSL Offloading

Encryption of Common Sensitive Data

Sensitive Data Encryption

Encrypts private identity information of users for storage.

Benefits

Data Breach Prevention
Prevents data breach risks caused by attacks.

Data Tampering Prevention
Prevents data tampering or leak risks caused by unauthorized access from internal users.

Related Products and Services

ECS

RDS

Encryption for Financial Payment

Meets Strict Compliance Requirements in Payment Scenarios

Ensures the integrity and confidentiality of payment data during transmission and storage, and also ensures the non-repudiation during the identity authentication and payment processes.

Benefits

Compliance
Meets compliance requirements in financial payment scenarios.

Business Security
Ensures the security of financial payment business.

Related Products and Services

ECS

RDS

WAF

SSL Offloading

Meets SSL Offloading Requirements

Accelerates SSL processing, ensures private key security for SSL certificates, and improves server security.

Benefits

Private Key Security
Prevents the breach of private keys for SSL certificates caused by attacks.

Prevention of high CPU utilization caused by SSL handshakes
Uses powerful HSM-based cryptographic operations to accelerate SSL processing and improve server performance.

Related Products and Services

ECS

RDS

Cloud Hardware Security Module (HSM) Pricing

Cloud Hardware Security Module (HSM) supports the subscription billing method. You can purchase instances based on your business requirements. To ensure the security of keys, we recommend that you subscribe to instances in primary/secondary mode on a monthly basis.

Region	Unit Price of HSM (USD/Month)	Unit Price of HSM (USD/Year)
Singapore (Singapore)	1,300	14,300
Malaysia (Kuala Lumpur)	1,300	14,300
China (Hong Kong)	1,500	16,500

Please contact us for other region deloyment enquiry.

Getting Started

Learn More

Documentation > Contact Sales > Common Tools >