The nShield Security World architecture supports a versatile key management framework that spans the entire nShield family of general-purpose HSMs. This unified architecture ensures a consistent administrative and user experience, with guaranteed interoperability – whether you’re managing one nShield HSM or hundreds.
As security teams adapt to evolving compliance mandates and data protection requirements, encryption usage continues to accelerate. HSMs are foundational to modern IT infrastructure. They enable secure key generation, storage, and management for cryptographic operations. But as encryption use cases grow, organizations must scale their HSM environments without inflating costs or operational complexity.nShield HSMs, underpinned by the Security World architecture, provide the tools to scale while optimizing security and cost-effectiveness.
Security World allows application keys to be managed across multiple HSMs, enforcing consistent policy alignment without compromising key security.
A Security World domain is initialized on an nShield HSM, which generates a master key and creates a set of smart cards known as the Administrator Card Set (ACS).
The ACS is used to program the same Security World master key into additional nShield HSMs, effectively enrolling them into the same Security World domain. This enables security teams to:
The Security World architecture is dedicated to the security of sensitive keys, including the keys that are employed within user applications. Application keys can include the following:
The Security World architecture is dedicated to the security of sensitive keys, including the keys that are employed within user applications. Application keys can include the following:Private signing keys (e.g., e-invoicing applications)TLS/SSL handshake keysSymmetric encryption keys (e.g., credit card encryption)Root of trust keys (e.g., for database encryption
Performance scalability across workloadsSupport for an unlimited number of HSMs within a Security World
Simplified backups – no need for manual key cloningUnlimited storage of application keys as tokens
Seamless failover and load balancingNo single point of failureHSMs shipped for repair or between sites never retain keys in memory
Download product documentation and resources
Explore other configurations and models that might suit your needs.
Recommended
#nShield5s
Learn how a PCIe HSM like the Entrust nShield 5s can protect your most sensitive information with cryptographic key services.
Recommended
#nShield5c
Learn how a FIPS HSM like the Entrust nShield 5c can protect your most sensitive data with cryptographic key services.
Recommended
#nShieldasaService
Discover how nShield as a Service (nSaaS) can help your organization leverage cryptographic services in the cloud.
Our team of experts is ready to help you find the perfect solution for your business needs. Get personalized advice and competitive quotes.
We're here to help with any questions
