UTIMACO’s Virtual Enterprise Secure Key Manager (vESKM) is the virtual version of the most interoperable and integrated Key Manager in the market. It provides a pre-configured and hardened security virtual appliance that provides a unified service for creating, protecting, and delivering cryptographic keys to data encryption devices and applications across the distributed enterprise IT infrastructure. Through that it enables you to protect and ensure continuous access to business critical and sensitive, data-at-rest encryption keys locally and remotely.

vESKM centralizes cryptographic processing, security policies and key management in a FIPS 140-2 Level 1 complaint platform.

- The private/public key pair stays under the control of the customer - it can be managed and revoked directly from ESKM.

- In a BYOK scenario, the vESKM generates the keys and uploads them to the respective CSP.

- Only authorized users have access to unencrypted data.

The ESKM allows you to manage the entire key life cycle (generate, store, distribute/use, rotate/rekey and terminate/revoke). vESKM can help simplify key management across the entire lifecycle while protecting the keys using HSMs as the root of trust. It is fully integrable with CC and VS-NfD compliant UTIMACO CryptoServer.

Utimaco provides flexible deployment option: vESKM can be connected to external Utimaco GP HSM

General note: For redundancy reasons Utimaco recommends deploying ESKM in cluster mode!