Skip to main content
This document explains how to migrate key material from a third-party hardware security module (HSM) or Key Management Server to a Vectera Plus HSM or KMES Series 3. For additional questions related to these devices, see the KMES Series 3 user guide.

​
Vectera Plus overview

The Vectera Plus HSM handles cryptographic processing and key management for various general-purpose use cases. Our HSMs protect data in transit, in use, and at rest through various physical and logical security measures, and we validate them under FIPS 140-2 Level 3 and PCI HSM standards. The Secure Cryptographic Device (SCD) contained within the Vectera Plus HSM handles all sensitive operations and supports common algorithms such as 3DES, AES, RSA, and ECC. It also supports a range of key derivation and wrapping methods, message authentication algorithms, and more.

​
KMES Series 3 overview

The KMES Series 3 is a scalable, versatile, and standards-compliant cryptographic device used to create, manage, distribute, and revoke keys and certificates. The KMES Series 3 provides a secure, functional platform for conducting full-life-cycle key and certificate management from a single location. You can store and keep track of existing keys and certificates and generate new ones as needed. Advantages of the KMES Series 3 include:
  • Offers management of the certificate life cycle and both full symmetric and asymmetric keys.
  • Has a permission-based user control system with dual control and segregation of roles.
  • Includes a robust, versatile API for programming automation of repetitive tasks.
  • Has design templates and print secure key mailers for distributing key components.
  • Enables remotely and securely injected encryption keys, reducing the logistical burden associated with direct key injection.
  • Enables you to manage keys from one central location, reducing the cost of traveling to multiple data centers.
  • Provides centralized operation of both certificate and registration authority functionality.
  • Has application encryption capabilities.
  • Provides support for Simple Certificate Enrollment Protocol (SCEP).
Another essential feature of the KMES Series 3 is its modular architecture system, built around our proven cryptographic technology. We designed this modular architecture system to provide custom solutions to fulfill the unique needs of organizations across a wide range of industries. Full integration with our Hardened Enterprise Security Platform enables the KMES Series 3 to offer unparalleled functionality expansion options and the scalability necessary to keep pace with even the most rapid and demanding organizational growth.

​
Integration overview

The sections of this guide explore the following external key migration topics:
  1. Key sources
  2. Key storage methods
  3. Key transport methods
  4. Futurex key storage methods