Ready to Secure Your PKI with Luna Network HSM 7?
Overview
Unsung is a Thales Silver Partner with over five years of experience deploying Luna HSMs, and we supply, implement and support Luna Network HSM 7 for UK government, defence and enterprise customers. It is a network-attached HSM, validated to FIPS 140-2 and FIPS 140-3 Level 3, that provides a hardware root of trust for PKI, code signing, TLS offload, database encryption and key management.
Buying Luna Network HSM 7 through Unsung
- Independent licensing advice. We recommend the licensing model and product mix that suit the applications you run, so you get value for money from Thales.
- Partner pricing through our Thales Silver partnership.
- Specialist support, with first-line triage from our PKI consultants and escalation to Thales when needed.
- Integration with your CA platforms. We connect Luna Network HSM 7 to EJBCA, Microsoft ADCS and your other applications, with partitions and HA configured for your estate.
The Challenge
PKI, encryption and signing services are only as secure as the keys behind them. Keys held in software, on file systems or in databases, can be extracted by malware, insiders or a compromised operating system. Frameworks across government, financial services and healthcare increasingly require hardware protection at FIPS 140-2 Level 3 or equivalent. Organisations also need HSMs that support the algorithms their applications use, perform at their transaction volumes and can be shared safely across applications or business units. With the post-quantum transition approaching, they need confidence that today's HSM investment will support quantum-resistant algorithms.
What It Does
Luna Network HSM 7 is a FIPS 140-2/3 Level 3 validated appliance that serves cryptographic operations to applications across the network. Keys are generated and stored inside its tamper-resistant boundary and never exist in software. It supports RSA, ECC and symmetric algorithms, and recent firmware adds post-quantum mechanisms including LMS/HSS and ML-DSA/ML-KEM via functionality modules. Up to approximately 100 isolated partitions allow one appliance to serve multiple applications or business units with strict separation. S-series models add multi-factor PED authentication for key ceremonies, and high availability configurations keep cryptographic services running.
How Unsung Helps
We deploy Luna Network HSMs as part of PKI builds and standalone projects. We assess requirements and size the platform, configure partitions, integrate with CA platforms including EJBCA and Microsoft ADCS, and run key ceremonies for root and issuing CAs, through to operational handover. For an example of this work in practice, see our migration de-risking case study.
Where latency is the priority, Luna PCIe HSM 7 may be a better fit. Payment-focused estates may want to compare Futurex CryptoHub, and organisations prioritising crypto-agility for post-quantum may look at QxHSM. We supply each of these, so our advice reflects your needs rather than a single vendor.
Related Unsung Services
- Hardware Security Modules: Luna HSM deployment, configuration, key ceremonies and operational support.
- PKI Design & Build: End-to-end PKI implementation with integrated HSM key protection.
- PKI Consultancy: Advice on HSM strategy, platform selection and cryptographic architecture.
- PKI Management & Hosting: Managed PKI services including ongoing HSM operations and key management.
