YubiHSM 2 capabilities include: generate, write, sign, decrypt, hash and wrapping keys. Most common use cases involve protecting of the certificate authorities (CAs) private key. Key protection is done in the secure on-chip hardware isolated from operations on the server.

YubiHSM 2 offers a compelling option for secure generation, storage and management of keys. Use Cases Enhance Protection for Cryptographic Keys YubiHSM 2 secures cryptographic keys through their entire lifecycle from secure key generation, attestation, secure key storage, secure key distribution, secure key backup all the way to secure key destruction if needed. In additional emerging use cases such as securing cryptocurrency exchanges and IoT gateways are just a few examples of how the world’s smallest HSM can secure modern infrastructures. The most common use case is hardware-based digital signature generation and verification.

The YubiHSM 2 features are accessible by integrating with an open source and comprehensive software development toolkit (SDK) for a wide range of open source and commercial applications. It offers a higher level of security for cryptographic digital key generation, storage, and management, for organizations running Microsoft Active Directory Certificate Services. It offers superior cost effective security and easy deployment making it accessible for every organization. The YubiHSM 2 FIPS is a game changing hardware solution for protecting Certificate Authority root keys from being copied by attackers, malware, and malicious insiders.

Yubi hsm