Yubico Launches New Innovation to Secure Servers

PALO ALTO, Calif. and STOCKHOLM, Aug. 18, 2011 — A growing number of security breaches on servers globally have raised the need for simple and affordable security solutions. Yubico, a leading open source authentication solution provider, today launches the YubiHSM, designed to protect secrets on servers at a yet unmatched simplicity and low cost.

 

Hundreds of thousands of servers around the world are storing sensitive user data and cryptographic secrets related to users. A rapidly increasing number of incidents where servers have been attacked and sensitive user data has been compromised have highlighted the urgent need for better protection of servers. However, the high cost and complexity involved with implementing Hardware Security Module (HSM) technology generally makes it cost prohibitive, thereby leaving the vast majority of servers with sub-standard level of protection.

Yubico has solved its own server security needs by developing an “HSM Light” in the form of a small USB appliance the size of a memory stick where sensitive user data and cryptographic operations are moved out from the server to  the YubiHSM. This approach protects the sensitive information from being remotely compromised.

XPD is a Swedish consulting company, providing Internet security and custom developed IT solutions for financial institutions, energy and healthcare companies and ISPs in Europe and USA. For the last couple of years the company have been recommending Yubico’s YubiKeys for strong authentication and used it for StoredSafe, their own easy to use password security product.

“We welcome the YubiHSM as a great complement for YubiKey users who requires confidentiality, high availability and who wants to manage the complete authentication process and protection of cryptographic secrets,” says Fredrik Söderblom, CEO XPD AB

Successfully used for its own authentication servers and by several beta testers around the globe, Yubico is now offering the YubiHSM for 500 USD per unit, and it can be ordered from the Yubico webstore.

For more information on the YubiHSM, please click here.

About Yubico

Yubico sets new global standards for simple and secure access to computers, mobile devices, servers, and internet accounts.

The company’s core invention, the YubiKey, delivers strong hardware protection, with a simple touch, across any number of IT systems and online services. The YubiHSM, Yubico’s ultra-portable hardware security module, protects sensitive data stored in servers.

Yubico is a leading contributor to the FIDO2WebAuthn, and FIDO Universal 2nd Factor open authentication standards, and the company’s technology is deployed and loved by 9 of the top 10 internet brands and by millions of users in 160 countries.

Founded in 2007, Yubico is privately held, with offices in Sweden, UK, Germany, USA, Australia, and Singapore. For more information: www.yubico.com

Press RoomPress Room

Share this article:


  • Digital security’s unique role in protecting our environmentAs sustainability expands to include social, economic, and technological challenges, cybersecurity has emerged as a top global threat – with cybercrime projected to cost $12 trillion this year. Stolen credentials and phishing account for 80% of breaches. At Yubico, making the world more secure is just part of how we care for the world around […]Read moreCSREarth DaySecure It ForwardSustainability
  • Breaking down Australia’s plan to combat AI-driven phishing scamsAcross Australia, cybercrime continues to be a major challenge impacting businesses, critical infrastructure and consumers alike. The use of AI by bad actors across the spectrum of cybercrime is on the rise, and as a result, credential phishing scams are becoming increasingly sophisticated. AI is effectively helping to lower the cost of phishing and increase […]Read moreAIAPACAustraliaphishing
  • 5 fast cybersecurity tips to clean up your digital lifeWith today being Identity Management Day, now is the perfect time to take stock of your online presence, update security settings, and ensure that your personal data remains protected from cyber threats like phishing. We’re also seeing increasing concerns of DeepSeek and other AI tools around data privacy making these kinds of attacks more successful […]Read morebest practices
  • Navigating the PCI DSS 4.0 transition and meeting compliance with phishing-resistant YubiKeysIn just a few days, on March 31, 2025, decision makers in industries that involve payment processing – including financial services, retail & hospitality and telecommunications – are tasked to finalize the transition to Payment Card Industry Data Security Standard (PCI DSS) 4.0. This deadline marks a critical juncture for all organizations handling payment card […]Read moreNISTPCI DSSPCI DSS 4.0