Hardware Security Modules

nShield Connect HSMs

nShield Connect HSMs are certified hardware security appliances that deliver cryptographic services to a variety of applications across the network. nShield HSM appliances are hardened, tamper-resistant platforms that perform such functions as encryption, digital signing, and key generation and protection. With their comprehensive capabilities, these HSMs can support an extensive range of applications, including certificate authorities, code signing and more.

PKIGuard Products

nShield Connect

#nShieldConnect
Our Price: Request a Quote

Get a Quote

Details that matter

Powerful Architecture

Build and grow your HSM estate using Security World, Entrust's unified ecosystem that delivers scalability, load balancing, seamless failover, and disaster recovery.

Faster Data Processing

Achieve industry-leading cryptographic transaction rates with nShield HSMs and leverage hardware acceleration to support maximum throughput and post-quantum agility.

Protection of sensitive business and application logic

Execute code within nShield boundaries, protecting your applications and the data they process.

Post-Quantum Secure

Strengthen your security posture with support for post-quantum algorithms, powered by NIST standards

Technical Specifications

Full specifications for nShield Connect

Specification	Details
Security Compliance	FIPS 140-2 Level 2 and Level 3 USGv6 accreditation eIDAS and Common Criteria EAL4 + AVA_VAN.5 and ALC_FLR.2 certification against EN 419 221-5 Protection Profile, under the Dutch NSCIB schemeCan form the basis of an EN 419 241-2 certified remote signing system for eIDAS.Compliant with BSI AIS 31 for true and deterministic random number generation ICP Brazil certification to NSC3 level Singapore CSA NITES certification for nShield Connect XC models
Safety and Environmental Standards Compliance	UL, CE, FCC, RCM
Canada ICES	RoHS2, WEEE
Supported APIs	PKCS#11, OpenSSL, Java (JCE)
Supported Cryptographic Algorithms	Asymmetric public key algorithms: RSA, Diffie-Hellman, ECMQV, DSA, KCDSA, ECDSA, ECDH, Edwards (X25519
Ed25519ph)	Symmetric algorithms: AES, AES-GCM, ARIA, Camellia, CAST, RIPEMD160 HMAC, SEED
Triple DES	Hash/message digest: SHA-1, SHA-2 (224, 256, 384, 512 bit)
HAS-160	Full Suite B implementation with fully licensed ECC including Brainpool and custom curves Elliptic Curve Key Agreement (ECKA) available via Java API and nCore APIs Elliptic Curve Integrated Encryption Scheme (ECIES) available via Java API
Specifications	Connect XC 107,384 hours