YubiHSM 2 and YubiHSM 2 FIPS
The YubiHSM 2 is a compact Hardware Security Module (HSM) that provides enterprise-grade protection for cryptographic keys, digital certificates, and sensitive operations. It is designed to secure servers, applications, cloud environments, and connected devices against key theft and unauthorized access.
Key Features
- Hardware-backed protection for cryptographic keys.
- Performs cryptographic operations inside the secure device, ensuring private keys never leave the HSM.
- Enables rapid integration with existing applications using industry-standard APIs.
- Simple deployment for organizations of any size.
- Available in both FIPS and non-FIPS versions with the same core feature set.
Benefits
- Enhanced protection for encryption keys and digital identities.
- Secure code signing, certificate management, and Public Key Infrastructure (PKI).
- Supports secure key generation, storage, and lifecycle management.
- Ideal for cloud, on-premises, DevOps, IoT, and enterprise environments.
Typical Use Cases
- Certificate Authority (CA) protection
- Code signing
- TLS/SSL key protection
- Database encryption
- Cloud key management
- IoT device provisioning
- PKI deployments
YubiKey as a Service
YubiKey as a Service enables organizations to rapidly deploy phishing-resistant YubiKeys across a global workforce without managing procurement and logistics internally.
Key Benefits
- Accelerates enterprise-wide YubiKey deployment.
- Supports passwordless and phishing-resistant authentication.
- Helps protect employees, partners, and customers against modern cyber threats, including AI-driven phishing attacks.
- Simplifies ordering, provisioning, and lifecycle management.
- Suitable for global organizations and distributed teams.
Software
Yubico Authenticator
The Yubico Authenticator application securely stores authentication credentials on a YubiKey rather than on a computer or mobile device.
Features
- Stores OATH-TOTP and HOTP credentials directly on the YubiKey.
- Prevents secret keys from being stored on the computer or smartphone.
- Generates secure one-time passcodes (OTP).
- Works across multiple devices by simply connecting the same YubiKey.
- Available for:
- Windows
- macOS
- Linux
- Android
- iOS
Benefits
- Stronger protection against malware and device compromise.
- Easy credential portability.
- Supports secure multi-factor authentication (MFA).
Computer Login Tools
Yubico provides tools that enable strong authentication for local computer logins.
Features
- Secure Windows and macOS logins using a YubiKey.
- Supports passwordless and multi-factor authentication.
- Integrates with enterprise identity providers and authentication systems.
- Enhances protection against unauthorized workstation access.
Common Use Cases
- Enterprise desktop authentication
- Remote workforce security
- Shared workstation environments
- Administrative account protection
Product Comparison
| Product | Primary Purpose | Best For |
|---|---|---|
| YubiKey 5 Series | Multi-factor and passwordless authentication | Users, enterprises, government |
| YubiKey Bio Series | Fingerprint-based passwordless login | Desktop users requiring biometric authentication |
| YubiHSM 2 / YubiHSM 2 FIPS | Hardware Security Module (HSM) for cryptographic key protection | PKI, code signing, certificate management, servers, cloud infrastructure |
| YubiKey as a Service | Global deployment and lifecycle management of YubiKeys | Large enterprises with distributed workforces |
| Yubico Authenticator | Secure storage and generation of OTP credentials on a YubiKey | Individuals and organizations using MFA |
| Computer Login Tools | Secure Windows and macOS login with YubiKey | Enterprise endpoint and workstation security |
