Skip to main content
CyberArk Vault enables you to secure, provision, manage, control, and monitor all activities associated with all types of privileged identities, such as:
  • Administrator on a Windows server
  • Root on a UNIX server
  • Cisco Enable on a Cisco device
  • Embedded passwords found in applications and scripts
The Privileged Access Security solution provides a safe haven within your enterprise where authorized users, such as IT staff, on-call administrators, and local administrators in remote locations, can securely archive, transfer, and share all administrative passwords. The multiple security layers (including Firewall, VPN, Authentication, Access control, Encryption, and more) that are at the heart of the Privileged Access Security solution offer you the most secure solution available for storing and sharing passwords in an enterprise environment. After you install and start the CyberArk Vault, you can generate a new Server key on the CryptoHub and store it within the confines of a FIPS 140-2 Level 3-validated HSM as a non-exportable key. The Server Key opens the Vault, much like the key of a physical Vault. You must have the key to start the Vault, after which you can remove the Server key until the Server restarts. When you stop the Vault, the information stored in the Vault is completely inaccessible without that key.

​
Benefits of CryptoHub integration through PKCS #11

Integrating with CryptoHub provides the following benefits:
  • Enhanced security: CryptoHub integration ensures that you securely store cryptographic keys related to privileged access in a hardware environment, significantly reducing the risk of compromise.
  • Optimized performance: We tailor our HSMs for high-speed cryptographic operations, which can lead to a more responsive and efficient privileged access management system.
  • Compliance readiness: Deploying CryptoHub facilitates compliance with regulations such as GDPR, SOX, and HIPAA that require stringent key management and data protection measures.
  • Operational continuity: CryptoHub provides redundancy and high availability capabilities, ensuring that privileged access management remains uninterrupted, even in the face of hardware failures.
  • Centralized key Management: CryptoHub offers a centralized approach to cryptographic key management, simplifying administration and reducing the likelihood of unauthorized access.