Yubico YubiHSM 2 FIPS - USB-A FIPS 140-2 Validated - v2.2 - 5060408464557
Out of stock
Yubico YubiHSM 2 FIPS - USB-A FIPS 140-2 Validated - v2.2 - 5060408464557
- Brand: Yubico
- MPN: 5060408464557
- Part #: MEMYBC0396
- UPC:
- Brand: Yubico
- MPN: 5060408464557
- Part #: MEMYBC0396
- UPC:
Features
Specifications
Reviews
Delivery & Pick-up
Returns & Warranty
Popular Security Keys & Authenticators





Yubico YubiHSM 2 FIPS - USB-A FIPS 140-2 Validated - v2.2 - 5060408464557
- Brand: Yubico
- MPN: 5060408464557
- Part #: MEMYBC0396

Product URL: https://www.pbtech.co.nz/product/MEMYBC0396/Yubico-YubiHSM-2-FIPS---USB-A-FIPS-140-2-Validated
Branch | New Stock | On Display |
---|---|---|
Auckland - Albany | 0 | |
Auckland - Glenfield | 0 | |
Auckland - Queen Street | 0 | |
Auckland - Auckland Uni | 0 | |
Auckland - Newmarket | 0 | |
Auckland - Westgate | 0 | |
Auckland - Penrose | 0 | |
Auckland - Henderson (Express) | 0 | |
Auckland - St Lukes | 0 | |
Auckland - Manukau | 0 | |
Hamilton | 0 | |
Tauranga | 0 | |
New Plymouth | 0 | |
Palmerston North | 0 | |
Petone | 0 | |
Wellington | 0 | |
Auckland - Head Office | 0 | |
Auckland - East Tamaki Warehouse | 0 | |
Christchurch - Hornby | 0 | |
Christchurch - Christchurch Central | 0 | |
Dunedin | 0 |
Features
https://www.yubico.com/nz/product/yubihsm-2-fips/
The YubiHSM 2 FIPS enables organizations of all sizes to enhance cryptographic key security throughout the entire lifecycle, reduce risk and ensure adherence with compliance regulations. With the YubiHSM 2 SDK available as open source, organizations can easily and rapidly integrate support for the secure YubiHSM 2 FIPS into a wide range of platforms and systems for existing and emerging use cases where strong security is more critical than ever before
- High quality - Built to last. IP68 rated (water and dust resistant), crush resistant, no batteries required, no moving parts.
- Rapid Integration, Easy Management - Custom application support using open source libraries. Interfaces via YubiHSM KSP, PKCS#11, and native libraries.
- Form-factor - "Nano" for discrete in-port retention. USB-A connector for standard 1.0, 2.0 and 3.0 ports. Designed for low-power usage.
- Securely manufactured - From component sourcing through manufacturing, Yubico ensures the highest levels of security. Made in the USA & Sweden.
- NIST Certification - FIPS 140-2 validated (Overall Level 2, Physical Security Level 3.)
Exclusions under change of mind returns
Yubico only takes returns & replacements for faulty keys.
For security reasons, Yubico won't accept returns for change of mind returns
.Please choose carefully when purchasing Yubico
Specifications
Windows, Linux, macOS
Linux
CentOS 7
Debian 8
Debian 9
Debian 10
Fedora 28
Fedora 30
Fedora 31
Ubuntu 1404
Ubuntu 1604
Ubuntu 1804
Ubuntu 1810
Ubuntu 1904
Ubuntu 1910
Windows
Windows 10
Windows Server 2012
Windows Server 2016
Windows Server 2019
macOS
10.12 Sierra
10.13 High Sierra
10.14 Mojave
Cryptographic interfaces (APIs)
Microsoft CNG (KSP)
PKCS#11 (Windows, Linux, macOS)
Native YubiHSM Core Libraries (C, python)
Cryptographic capabilities
Hashing (used with HMAC and asymmetric signatures)
SHA-1, SHA-256, SHA-384, SHA-512
RSA
2048, 3072, and 4096 bit keys
Signing using PKCS#1v1.5 and PSS
Decryption using PKCS#1v1.5 and OAEP
Elliptic Curve Cryptography (ECC)
Curves: secp224r1, secp256r1, secp256k1, secp384r1, secp521r, bp256r1, bp384r1, bp512r1, curve25519
Signing: ECDSA (all except curve25519), EdDSA (curve25519 only)
Decryption: ECDH (all except curve25519)
Key wrap
Import and export using NIST AES-CCM Wrap at 128, 196, and 256 bits
Random numbers
On-chip True Random Number Generator (TRNG) used to seed NIST SP 800-90 AES 256 CTR_DRBG
Attestation
Asymmetric key pairs generated on-device may be attested using a factory certified attestation key and certificate, or using your own key and certificate imported into the HSM
Performance
Performance varies depending on usage. The accompanying Software Development Kit includes performance tools that can be used for additional measurements. Example metrics from an otherwise unoccupied YubiHSM 2
RSA-2048-PKCS1-SHA256: ~139ms avg
RSA-3072-PKCS1-SHA384: ~504ms avg
RSA-4096-PKCS1-SHA512: ~852ms avg
ECDSA-P256-SHA256: ~73ms avg
ECDSA-P384-SHA384: ~120ms avg
ECDSA-P521-SHA512: ~210ms avg
EdDSA-25519-32Bytes: ~105ms avg
EdDSA-25519-64Bytes: ~121ms avg
EdDSA-25519-128Bytes: ~137ms avg
EdDSA-25519-256Bytes: ~168ms avg
EdDSA-25519-512Bytes: ~229ms avg
EdDSA-25519-1024Bytes: ~353ms avg
AES-(128|192|256)-CCM-Wrap: ~10ms avg
HMAC-SHA-(1|256): ~4ms avg
HMAC-SHA-(384|512): ~243ms avg
Storage capacity
All data stored as objects. 256 object slots, 128KB (base 10) max total
Stores up to 127 rsa2048, 93 rsa3072, 68 rsa4096 or 255 of any elliptic curve type, assuming only one authentication key is present
Object types: Authentication keys (used to establish sessions); asymmetric private keys; opaque binary data objects, e.g. x509 certs; wrap keys; HMAC keys
Management
Mutual authentication and secure channel between applications and HSM
M of N unwrap key restore via YubiHSM Setup Tool
Software Development Kit
A Software Development Kit for YubiHSM 2 is available for download on Yubico.com and includes:
YubiHSM Core Library (libyubihsm) for C, Python
YubiHSM Shell (Configuration CLI)
PKCS#11 Module
YubiKey Key Storage Provider (KSP) for use with Microsoft
YubiHSM Connector
YubiHSM Setup Tool
Documentation and code examples
Form factor
'nano' designed for confined spaces such as internal USB ports in servers
Dimensions
12mm x 13mm x 3.1mm
Weight
1 gram
Current requirements
20mA avg, 30mA max
Safety and environmental compliance
FCC
CE
WEEE
ROHS
Host interface
Universal Serial Bus (USB) 1.x Full Speed (12Mbit/s) Peripheral with bulk interface.