Entrust nShield HSMs

Entrust nShield Hardware Security Modules (HSMs) are FIPS 140-2 and 140-3 certified hardware devices used to generate, store, and manage cryptographic keys outside of software environments. The product line includes general purpose HSMs such as the nShield 5c (network-attached) and nShield 5s (PCIe card), a portable USB-connected nShield Edge for low-volume transactions, nShield Connect networked appliances, and nShield as a Service (nSaaS) for cloud-based deployment. HSMs can be deployed on-premises, in the cloud, or in hybrid configurations. The HSMs are built on Entrust's Security World architecture, which allows organizations to manage multiple HSMs as a unified estate with consistent policies, unlimited key storage, load balancing, and failover without disruption. nShield 5 hardware includes a programmable FPGA that supports in-field firmware updates and post-quantum cryptography algorithm adoption without requiring hardware replacement. Use cases include protecting root and certificate authority keys for public key infrastructure, securing payment transactions, and enabling crypto-agility for emerging cryptographic standards. An optional CodeSafe SDK allows organizations to run sensitive application code inside the HSM boundary without modifying the certified firmware. Management and monitoring are supported through the Cryptographic Security Platform (CSP) HSM Manager, which provides centralized configuration, monitoring, and lifecycle governance of distributed HSM estates, keys, certificates, and secrets across on-premises and multi-cloud environments.