thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Hardware Security Module (HSM)

Tamper-resistant hardware device that generates, stores, and uses cryptographic keys without exposing them.

Definition

HSMs perform cryptographic operations internally so private keys never leave the device in plaintext. They are validated under FIPS 140-3, commonly at Level 3, and are used for CA keys, payment processing, code signing, and cloud KMS backends. Cloud offerings include AWS CloudHSM, Azure Managed HSM, and Google Cloud HSM.

Example

A CA's root private key is generated inside a network HSM and can only be used with a quorum of officer cards.

Exam tip

HSM = dedicated, high-performance enterprise key protection; TPM = per-device chip.

Don't confuse it with

Related terms