Details that matter
How Security World Works
Security World allows application keys to be managed across multiple HSMs, enforcing consistent policy alignment without compromising key security.
Creating and Managing a Security World
A Security World domain is initialized on an nShield HSM, which generates a master key and creates a set of smart cards known as the Administrator Card Set (ACS).
The ACS is used to program the same Security World master key into additional nShield HSMs, effectively enrolling them into the same Security World domain. This enables security teams to:
- Expand cryptographic processing capacity
- Replace or redeploy HSMs as needed
These sensitive operations require quorum authorization by security officers possessing ACS credentials.
Application Key Tokens and Secure Key Wrapping
The Security World architecture is dedicated to the security of sensitive keys, including the keys that are employed within user applications. Application keys can include the following:
- Private signing keys (e.g., e-invoicing applications)
- TLS/SSL handshake keys
- Symmetric encryption keys (e.g., credit card encryption)
- Root of trust keys (e.g., for database encryption, PKI certificate authorities)
- Machine identities
- Privileged access management keys
Application Key Tokens and Secure Key Wrapping
The Security World architecture is dedicated to the security of sensitive keys, including the keys that are employed within user applications. Application keys can include the following:Private signing keys (e.g., e-invoicing applications)TLS/SSL handshake keysSymmetric encryption keys (e.g., credit card encryption)Root of trust keys (e.g., for database encryption
Scalable HSM Environments
Performance scalability across workloadsSupport for an unlimited number of HSMs within a Security World
Operational Convenience and Flexibility
Simplified backups – no need for manual key cloningUnlimited storage of application keys as tokens
High Resilience and Availability
Seamless failover and load balancingNo single point of failureHSMs shipped for repair or between sites never retain keys in memory
