Protect Your Data on Cloud and Meet Compliance Requirements
Cloud Hardware Security Module (HSM) allows you to generate and use your encryption keys on hardware that is FIPS 140-2 Level 3 validated. It also allows you to access tamper-resistant HSM instances in your Alibaba Cloud VPC in an exclusive and single-tenant manner to protect your keys.
You can use industry-standard APIs, such as PKCS#11 and Java Cryptography Extensions (JCE), to integrate Data Encryption Service with custom applications. You can also transfer your keys to other commercial HSM solutions. This provides an easy method for you to migrate keys to or from Alibaba Cloud.
Compliance
Uses HSMs that are FIPS 140-2 Level 3 validated to meet compliance requirements.
Authentication and Authorization
Separation of duties based on role-based access control. Alibaba Cloud monitors the health and network availability of the HSM hardware, and you fully control the HSMs and the generation and use of your encryption keys.
Elastic Scaling
Allows you to add or remove HSMs in the Alibaba Cloud Management Console based on your business requirements. You can also adjust configurations and specifications to meet specific encryption and decryption requirements.
How It Works
Cloud Hardware Security Module (HSM) is a hosted service. You can deploy this service on Alibaba Cloud in an easy and cost-effective way. Alibaba Cloud manages and maintains HSMs.
Scenarios
Encryption of Common Sensitive Data
Sensitive Data Encryption
Encrypts private identity information of users for storage.
Benefits
Data Breach Prevention
Prevents data breach risks caused by attacks.
Data Tampering Prevention
Prevents data tampering or leak risks caused by unauthorized access from internal users.
Encryption for Financial Payment
Meets Strict Compliance Requirements in Payment Scenarios
Ensures the integrity and confidentiality of payment data during transmission and storage, and also ensures the non-repudiation during the identity authentication and payment processes.
Benefits
Compliance
Meets compliance requirements in financial payment scenarios.
Business Security
Ensures the security of financial payment business.
SSL Offloading
Meets SSL Offloading Requirements
Accelerates SSL processing, ensures private key security for SSL certificates, and improves server security.
Benefits
Private Key Security
Prevents the breach of private keys for SSL certificates caused by attacks.
Prevention of high CPU utilization caused by SSL handshakes
Uses powerful HSM-based cryptographic operations to accelerate SSL processing and improve server performance.
Cloud Hardware Security Module (HSM) Pricing
Cloud Hardware Security Module (HSM) supports the subscription billing method. You can purchase instances based on your business requirements. To ensure the security of keys, we recommend that you subscribe to instances in primary/secondary mode on a monthly basis.
| Region | Unit Price of HSM (USD/Month) | Unit Price of HSM (USD/Year) |
| Singapore (Singapore) | 1,300 | 14,300 |
|---|---|---|
| Malaysia (Kuala Lumpur) | 1,300 | 14,300 |
| China (Hong Kong) | 1,500 | 16,500 |
Please contact us for other region deloyment enquiry.
Upgraded Support For You
1 on 1 Presale Consultation, 24/7 Technical Support, Faster Response, and More Free Tickets.
1 on 1 Presale Consultation
24/7 Technical Support
6 Free Tickets per Quarter
