IBM Cloud Hyper Protect Crypto Services

IBM Cloud Hyper Protect Crypto Services offers highly regulated organizations a managed cryptographic service in the cloud. It provides dedicated control down to the root secret of the Hardware Security Module. The Hardware Security Modules are FIPS 140-2 level 4 certified. This accounts for reliable protection of your keys, certificates, and cryptographic operations.

As part of the IBM Hyper Protect family of services, it introduces protection even from privileged users. It comprises built-in high availability and scaling capabilities, which addresses always-on requirements of the digital enterprise.

With Keep Your Own Key, Hyper Protect Crypto Services assures that all your secrets are always kept under control of keys that you own.

Key management service

A key management service like IBM Key Protect manages the entire lifecycle of keys. This ranges from key creation through application use, key archival, and key destruction. It enforces separation of duties between data management and key management.

Company policies, industry best practices, and government regulations increasingly require data-at-rest encryption. Encryption key management is a fundamental requirement for data storage, management, and governance. IBM Key Protect helps clients secure their sensitive data from unauthorized access or inadvertent employee release while meeting compliance auditing standards. L earn more about Key Protect here.

Hyper Protect Crypto Services is a drop-in replacement for IBM Key Protect and exposes the same key management services. As a single-tenant service, it offers dedicated control of the Hardware Security Module per customer. It extends the family of key management services in the IBM Cloud towards single-tenant instances with dedicated hardware secret control.

Check out IBM Cloud Hyper Protect Crypto Services now!

New with this experimental update

Hyper Protect Crypto Services transitions from a backend Hardware Security Module for IBM Key Protect to a stand-alone key management system functionality. There is no further need to set up both services (all-in-one solution).
HSM Master Keys can now be customer managed (setup/delete) with an IBM Cloud CLI add-on from on-premises.
Deprecation of Advanced Crypto Service Provider (ACSP) Remote Hardware Security Module Services.
- Already deployed experimental instances will continue to work until further notice.
- No further management of experimental instances (create, delete, manage).
- Attention: Please keep in mind that no migration is supported for experimental services.
Temporary unavailability of Hardware Security Module services in the updated service until further notice.

We are working on bringing back the Hardware Security Module function with cloud-ready interfaces (Enterprise PKCS#11). We will keep you posted in this blog.

Christopher Smith

Program Director, IBM Hyper Protect Solution, Hyper Protect Crypto Services

Success and recognition of IBM offerings in G2 Summer Reports

2 min read - IBM offerings were featured in over 1,365 unique G2 reports, earning over 230 Leader badges across various categories. This recognition is important to showcase our leading products and also to provide the unbiased validation our buyers seek. According to the 2024 G2 Software Buyer Behavior Report, “When researching software, buyers are most likely to trust information from people with similar roles and challenges, and they value transparency above other factors.” With over 90 million visitors each year and hosting more than 2.6…

Manage the routing of your observability log and event data

4 min read - Comprehensive environments include many sources of observable data to be aggregated and then analyzed for infrastructure and app performance management. Connecting and aggregating the data sources to observability tools need to be flexible. Some use cases might require all data to be aggregated into one common location while others have narrowed scope. Optimizing where observability data is processed enables businesses to maximize insights while managing to cost, compliance and data residency objectives. As announced on 29 March 2024, IBM Cloud® released its next-gen observability…

Unify and share data across Netezza and watsonx.data for new generative AI applications

3 min read - In today's data and AI-driven world, organizations are generating vast amounts of data from various sources. The ability to extract value from AI initiatives relies heavily on the availability and quality of an enterprise's underlying data. In order to unlock the full potential of data for AI, organizations must be able to effectively navigate their complex IT landscapes across the hybrid cloud. At this year’s IBM Think conference in Boston, we announced the new capabilities of IBM watsonx.data, an open…