- Home
- Encryption Key Management Software
- Bloombase KeyCastle
Bloombase KeyCastle
Redwood City, California, United States
What it is
Bloombase KeyCastle is self-hosted enterprise software for managing cryptographic keys and certificate authority certificates. It handles private and public signature keys, authentication keys, and data encryption keys, with tools to generate, import, store, protect, verify, validate, inquire about, and delete keys. Bloombase says keys stored in KeyCastle cannot technically be retrieved in plain form. Its specifications list AES, RSA, SHA hashes, and other ciphers, as well as post-quantum options such as CRYSTALS-Kyber and CRYSTALS-Dilithium. The product supports PKCS#11 hardware security modules and OASIS KMIP-compatible key managers, with integrations for cloud key services from AWS, Google, IBM, Microsoft Azure, and Oracle. Certificate functions include X.509 and PKCS#12 import and export, validity checks, and revocation checks. Administrators have web and command-line consoles, central administration, SNMP, and syslog. Optional high availability includes active-active or active-standby operation. KeyCastle is paid, with pricing on request, and a free trial is available; Bloombase says customers may qualify for a 30-day evaluation kit by submitting a request.
For and against
For
- Manages several key types and certificate authority certificates
- Supports PKCS#11 HSMs and OASIS KMIP-compatible managers
- Integrates with named cloud key services
- Optional active-active or active-standby high availability
- No stated limit on managed key count
Against
- Paid product with pricing available on request
- Evaluation kit requires a request; eligibility may vary
- Maintenance and technical support are subscription services
The verdict
KeyCastle brings key lifecycle, certificate, administration, and recovery capabilities into a self-hosted enterprise product. Organizations should request pricing and confirm evaluation and support arrangements with Bloombase.
Who it suits
KeyCastle suits enterprises, government organizations, and teams in industries such as banking, healthcare, and telecommunications that need centralized key and certificate management. It is designed for self-hosted deployments and supports several operating systems and virtual platforms.
On the record
- Administration
- Management options include a web console, central administration and configuration, serial console, SNMP, and syslog.bloombase.com · read 9 Oct 2026
- Algorithms
- Listed cryptographic options include AES, RSA, SHA-1/256/384/512, Camellia, SEED, ARIA, and other ciphers and hash algorithms.bloombase.com · read 9 Oct 2026
- Audience
- Bloombase describes its products as enterprise information security solutions and says they are deployed by governments and organizations across industries including banking, insurance, healthcare, telecommunications, and manufacturing.bloombase.com · read 9 Oct 2026
- Availability and recovery
- Optional high availability supports active-active or active-standby operation, and disaster recovery includes configuration backup and restore and customer-defined recovery quorums.bloombase.com · read 8 Oct 2026
- Certificate handling
- KeyCastle supports X.509 and PKCS#12 key import and export, certificate retrieval, and revocation checks using CRL, CRLDP, and OCSP.bloombase.com · read 8 Oct 2026
- Certificate management
- It supports X.509 and PKCS#12 key import and export, certificate validity checks, and revocation checks using CRL or OCSP.bloombase.com · read 9 Oct 2026
- Client access
- Clients can access KeyCastle through PKCS#11, KMIP, OpenSSL, Java JCA/JCE, web services, HTTP/HTTPS, and other listed interfaces.bloombase.com · read 8 Oct 2026
- Cryptography
- The specifications list AES, RSA, SHA hashes, multiple other cipher algorithms, and post-quantum algorithms including CRYSTALS-Kyber and CRYSTALS-Dilithium.bloombase.com · read 8 Oct 2026
- Evaluation
- Customers may be entitled to a 30-day free evaluation kit, requested through a form that asks for business contact and project details.bloombase.com · read 9 Oct 2026
- Hardware security
- KeyCastle supports NIST FIPS 140-2 hardware security modules and PKCS#11 hardware cryptographic accelerators.bloombase.com · read 9 Oct 2026
- Integrations
- Listed integrations include RDBMS, generic LDAP, PKCS#11, OpenSSL, Java JCA/JCE, and web services.bloombase.com · read 9 Oct 2026
- Intended users
- Bloombase describes KeyCastle as an enterprise key management product, and says its products serve governments and organizations across industries including banking, healthcare, and telecommunications.bloombase.com · read 8 Oct 2026
- Key capacity
- The specifications state there is no limit on the number of cryptographic keys managed, which scales with system storage infrastructure.bloombase.com · read 9 Oct 2026
- Key handling
- It supports key generation, import, secure storage, verification, validation, inquiry, and deletion.bloombase.com · read 9 Oct 2026
- Key management standards
- The specifications list OASIS KMIP-compatible key managers and support for PKCS#11.bloombase.com · read 8 Oct 2026
- Key operations
- KeyCastle supports key generation, storage and protection, and the product specifications say there is no limit on the number of cryptographic keys it can manage.bloombase.com · read 8 Oct 2026
- Key protection
- Bloombase says generated or imported keys are stored and locked down in KeyCastle, with no technical way to retrieve their plain contents.bloombase.com · read 8 Oct 2026
- Management
- The specifications list a web management console, central administration, a command-line console, SNMP, and syslog.bloombase.com · read 8 Oct 2026
