Luna Cloud HSM
Overview
For organisations that need dedicated hardware key protection without buying and running physical appliances, Unsung supplies and implements Luna Cloud HSM as a Thales Silver Partner. Delivered through Thales Data Protection on Demand, it provides Luna HSM instances in the cloud that work with the same client as on-premises Luna HSMs.
Why buy Luna Cloud HSM through Unsung
We give independent advice on the right licensing model and product mix, including whether a cloud, on-premises or hybrid approach suits you best, so you get value for money from Thales. You also benefit from partner pricing through our Thales relationship, and from first-line support by our PKI specialists, who triage issues and escalate to Thales where needed. Because the service uses the standard Luna Client, we make sure it connects to your existing CAs, applications and on-premises Luna HSMs, including high availability groups that span both environments.
The Challenge
Moving applications to the cloud does not remove the need for hardware key protection. Buying and running physical HSMs means capital cost, data centre space and specialist skills that many organisations cannot resource. Key management services offered by cloud platforms are convenient, but they may not satisfy regulatory or assurance requirements for dedicated hardware. Organisations that already run on-premises Luna HSMs face a further problem. They want to extend into the cloud without introducing a second HSM platform, keeping key management practices consistent and building high availability that spans both environments.
What It Does
Luna Cloud HSM provides dedicated Luna HSM instances hosted by Thales and accessed over the network through the standard Luna Client. Applications already integrated with Luna Network or PCIe HSMs can connect without code changes, and high availability groups can include both cloud and on-premises units. Keys remain in hardware at all times, with protection suited to regulated environments. There is no hardware to procure, rack or maintain. The service is delivered through the Data Protection on Demand marketplace, so capacity can scale as requirements change.
How Unsung Helps
We help you decide whether cloud HSM is the right model, then design and implement it. That includes hybrid architectures spanning Luna Cloud HSM and on-premises Luna infrastructure, integration with your applications and PKI, and consistent key management practices across both. Where you would rather not run the PKI yourself, our managed service can operate it on cloud-hosted HSM infrastructure.
Luna Cloud HSM is not the only option. If you need wider key management and data security services alongside HSM capability, Fortanix DSM may suit better, and for payment workloads Futurex VirtuCrypt is worth considering. Because we supply all three, our recommendation follows your requirements.
Related Unsung Services
- Hardware Security Modules: Cloud and on-premises HSM strategy, deployment and integration.
- PKI Management & Hosting: Managed PKI services running on cloud-hosted HSM infrastructure.
- PKI Consultancy: Advice on cloud cryptographic strategy and hybrid HSM architectures.
- PKI Design & Build: Design and implementation of cloud and hybrid PKI environments.
