If you mean in general, there are lots of vendors, including (vendor: product):
Utimaco: CryptoServer Thales: Luna Entrust: nCipher Securosys: Primus ATOS (Eviden): Trustway Proteccio FutureX: CryptoHub SoftHSM: SoftHSM2 (software emulation, for PKCS#11 testing/validation) ...and lots more. There are cheap Chinese vendors that are of questionable trustability (is that a word?). The list above all do PKCS#11; Utimaco Atalla AT1000 and Entrust nCipher also have their own proprietary protocols, and Atalla does not do PKCS#11 at all. Atalla is focused on Payments processing. Like most standards, PKCS#11 is a framework and "software x supports PKCS#11" does not mean "...and therefore software x will work with every PKCS#11 HSM". This is partly because of optional HSM services, but mostly because of configuration and auth (authorization/authentication) variations between implementations. Does this help? ...phsiii -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Radoslaw Skorupka Sent: Sunday, July 26, 2026 8:26 AM To: [email protected] Subject: HSM units vendors In reference to the recent discussion about cryptography, a question occurred to me: what are current HSM vendors? Obviously IBM and CryptoExpress family (also available on distributed systems as PCIe card). Thales series 10000 (previously Racal, AFAIR) ... what else? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
