A Yubico first…introducing the YubiHSM 2 FIPS

May 3, 2021 3 minute read

Compliance mandates require many of our customers in regulated industries or in high-risk environments to prove adequate levels of protection for their data, no matter where it lives or travels. This is why today we’ve not only launched the YubiKey 5 FIPS Series but also the smallest FIPS-validated hardware security module (HSM) in the world, the YubiHSM 2 FIPS. The YubiHSM 2 FIPS meets FIPS 140-2, Level 3.

While the YubiHSM 2 launched in 2017, there’s never been a FIPS-validated version of the product. Now, our high-risk customers can achieve and maintain compliance while getting the same security benefits as other YubiHSM users. These include advanced protection for certificate authority (CA) keys, database master keys, code signing, authentication/access tokens, manufacturing processes and component authenticity checks, IoT gateways or proxies, file encryption, cryptocurrency exchanges, and more.

While credential theft and phishing attacks continue to skyrocket, so do the number of server-based attacks. Approximately 95% of all IT breaches happen when a user credential or server gets hacked — a fact reinforced by the dizzying array of breaches to hit news headlines within the past year. And with 53% of all respondents from our study with 451 Research saying they’ve experienced a security incident or breach in the past year, the need for strong security across an organization’s entire infrastructure becomes even more clear.

The rise of threats like zero-day exploits and malware, makes software-based cryptographic key storage increasingly vulnerable for organizations. Alternatively, HSMs offer advanced protection, backed by tamper-resistant hardware, for servers and the cryptographic keys stored within them. 

Clearly, we’re big fans of the YubiHSM 2 FIPS. But if it wasn’t clear why you should also be a fan, here are some more reasons:

  • Secure hardware protection for cryptographic keys

The YubiHSM 2 FIPS enables secure key storage and operations on tamper-resistant hardware, with audit logging. This prevents accidental copying and distribution of keys, and remote theft of cryptographic software keys. Extensive cryptographic capabilities include: hashing, key wrapping, asymmetric signing, decryption, attestation and more. 

  • Innovative design for flexible use and simple deployment

Traditional rack-mounted and card-based HSMs are not practical for many organizations due to their size and deployment complexity. The YubiHSM 2 FIPS offers a portable ‘nano’ form factor that allows fast and flexible deployment across diverse environments. It fits easily into a USB-A slot, lying almost flush to remain concealed. 

  • Low-cost, high security ROI

The YubiHSM 2 FIPS delivers government-grade high cryptographic security and operations at a price point that is up to 90% cheaper than traditional HSMs. Additionally, low-power usage reduces business energy consumption. 

For more information on YubiHSM 2 FIPS, please visit the Yubico site. It is also available for purchase on the Yubico store, through Yubico’s dedicated sales team, or from any Yubico-approved channel partners and resellers

Share this article:

Recommended content

Thumbnail

Securing Your Critical Assets in an Ever-Changing Regulatory Environment

Learn how the YubiKey helps organizations meet global compliance regulations including FIPS, GDPR, HIPAA and others with modern strong authentication

Thumbnail

What SolarWinds taught us about the importance of a secure code signing system

Last year’s SolarWinds attack was caused by intruders who managed to inject Sunspot malware into the software supply chain. The hackers exploited a breach in the SolarWinds code signing system, which allowed them to fraudulently distribute malicious code as legitimate updates to installations across the world. While this attack taught the industry many lessons, one ...

Thumbnail

YubiKey firmware update: YubiKey 5 Series with firmware 5.4

As of today, Yubico will start shipping the YubiKey 5 Series with firmware 5.4. This new firmware release will enable easier integration with Credential Management System (CMS) solutions, secure remote provisioning of YubiKeys, and expanded methods for PIV management.  Key benefits of the YubiKey Firmware Update for the YubiKey 5 Series with 5.4 firmware include: ...

Thumbnail

Modern approaches to remote identity provisioning across civilian agencies

Learn how Yubico, ID.me and Entrust are working together to offer remote identity provisioning of strong authentication alternate credentials to civilian agencies