Fortanix Data Security Manager (DSM)
Overview
Unsung is a Fortanix Bronze Partner. We supply, implement and support Fortanix Data Security Manager (DSM), a single platform for key management, tokenisation, secrets management and application and database encryption, available as SaaS, a virtual appliance or a hardware appliance with an integrated FIPS 140-2 Level 3 HSM.
Buying Fortanix DSM through Unsung
We provide independent advice on the licensing model and product mix that suit your environment, so you get value for money from Fortanix.
Alongside this, buying through Unsung means:
- Partner pricing through our Fortanix partnership.
- A platform that fits your estate. We integrate DSM with your cloud providers, databases, applications and any existing HSMs, using the interfaces they already support.
- Specialist support, with first-line triage from Unsung PKI specialists and escalation to Fortanix where needed.
The Challenge
Organisations running across several clouds and on-premises environments often end up with fragmented data security. Keys are managed through provider-specific services, secrets sit in separate vaults and tokenisation runs on yet another platform. The outcome is inconsistent policy, operational complexity and difficulty proving compliance across the estate. Traditional approaches also depend on separate HSMs for key protection, adding cost and integration effort. Organisations need one platform that brings key management, encryption, tokenisation and secrets together with HSM-grade protection, without dedicated physical HSMs for every deployment.
What It Does
DSM provides one platform for data security operations. Key management covers the full lifecycle across multiple cloud providers, with BYOK support so organisations keep control of keys wherever data resides. Tokenisation and application-layer encryption protect sensitive fields, and secrets management secures API keys, credentials and configuration used by applications and DevOps pipelines. DSM integrates through REST, KMIP, PKCS#11, JCE and CAPI/CNG. Its Intel SGX-based architecture delivers HSM-grade key protection within the platform, removing the need for separate network-attached HSMs in many scenarios. The hardware appliance includes an integrated FIPS 140-2 Level 3 HSM.
How Unsung Helps
We help you assess your data security and key management requirements, decide whether a unified platform suits your environment, and then design, deploy and integrate DSM with your applications, databases and cloud services. We also advise on when DSM's integrated key protection is enough and when a dedicated HSM is still warranted.
Where centralised key lifecycle control in an on-premises, regulated setting matters most, Cryptomathic CKMS may fit better. For a dedicated network HSM, consider Luna Network HSM 7. We supply all of these, so our advice is impartial.
Related Unsung Services
- Hardware Security Modules: HSM strategy, deployment and integration for key protection.
- PKI Consultancy: Advice on cryptographic infrastructure and key management strategy.
- PKI Design & Build: Design and implementation of data security and cryptographic architectures.
- Cryptographic Bill of Materials: Discovery and inventory of keys and cryptographic assets before consolidation.
