- Home
- Key Management Software
- Utimaco Enterprise Secure Key Manager
Utimaco Enterprise Secure Key Manager
Aachen, Germany and Campbell, California, USA
What it is
Utimaco Enterprise Secure Key Manager (ESKM) centralizes cryptographic key management across on-premises and cloud environments. It provides policy controls, centralized administration, and audit trails for key lifecycle management, along with monitoring, recovery, scheduled backups, log rotation, and restore functions. Administrators can use a web GUI or command-line interface. ESKM supports OASIS KMIP, a RESTful API, and a native XML-based KMS protocol. Its client library support includes KMIP, OpenKMIP, and PyKMIP, and it conforms to KMIP specifications 1.0 through 2.1. The product page states capacity for more than 2 million keys, over 25,000 clients, and thousands of nodes in a distributed cluster. Four models include a Linux-based virtual appliance and hardware appliances. Physical L3 and L4 models have embedded HSMs identified as FIPS 140-2 Level 3 and Level 4; the virtual L1 model is a security-hardened appliance with FIPS 140-2 Level 1 security. Listed key types include AES, 3-Key Triple DES, HMAC, RSA, and ECDSA. Pricing is on request.
For and against
For
- Centralizes key lifecycle controls and audit trails.
- Supports KMIP, REST, and XML-based interfaces.
- Offers virtual and hardware appliance models.
- Includes monitoring, backups, recovery, and restore functions.
Against
- Pricing is available on request.
- Deployment is limited to four listed models.
- Physical HSMs are specified for L3 and L4 models.
The verdict
ESKM combines centralized key administration with multiple interfaces, appliance models, and operational tools. Organizations will need to request pricing.
Who it suits
ESKM suits organizations managing cryptographic keys across on-premises and cloud environments. Its APIs, appliance choices, and integrations may fit teams with varied infrastructure.
Plans and prices
Enterprise Secure Key Manager
ESKM L1 virtual appliance · L2-L4 1U hardware appliances · client licensing
Read 14 Oct 2026 · utimaco.com
Enterprise Secure Key Manager (ESKM)
Transparent client licensing · no hidden costs tied to key volume or scalability · four models
Read 3 Oct 2026 · utimaco.com
On the record
- APIs
- ESKM exposes OASIS KMIP, a REST interface and a KMS interface.utimaco.com · read 14 Oct 2026
- AWS BYOK
- The AWS integration generates keys in ESKM and imports them into AWS Key Management Service.integration-guides.utimaco.com · read 14 Oct 2026
- Azure BYOK
- The Azure integration lets customers keep key ownership in ESKM while Azure Key Vault uses the imported keys.integration-guides.utimaco.com · read 14 Oct 2026
- Capacity
- The datasheet states capacity above two million keys, more than 25,000 clients and up to eight ESKM nodes in a distributed cluster.support.hsm.utimaco.com · read 14 Oct 2026
- Centralized lifecycle
- The product centralizes key creation, storage, use, rotation and deletion for on-premises and cloud environments.azuremarketplace.microsoft.com · read 14 Oct 2026
- Client libraries
- The product page says it supports open client libraries including KMIP, OpenKMIP, and PyKMIP, and conforms to KMIP specifications 1.0 through 2.1.utimaco.com · read 3 Oct 2026
- Common Criteria
- The ESKM v5.1 security target claims Common Criteria EAL2 augmented conformance.commoncriteriaportal.org · read 14 Oct 2026
- Company
- Utimaco says it is headquartered in Aachen, Germany, and Campbell, California.utimaco.com · read 3 Oct 2026
- Company foundation
- LinkedIn lists Utimaco's founding year as 1983 and headquarters in Aachen, North Rhine-Westphalia.linkedin.com · read 14 Oct 2026
- Company legal name
- The Microsoft Azure Marketplace listing identifies the publisher as Utimaco IS GmbH.azuremarketplace.microsoft.com · read 14 Oct 2026
- Company size
- LinkedIn lists Utimaco as privately held with 501-1,000 employees.linkedin.com · read 14 Oct 2026
- Compliance
- Utimaco lists FIPS 140-2 levels 1 through 4 by model, NIST SP 800-131A, Common Criteria EAL2+, PCI-DSS controls and HIPAA support; FIPS 140-3 Level 2 is described as pending.utimaco.com · read 14 Oct 2026
- Cryptography
- The product page lists AES, 3-Key Triple DES, HMAC, RSA, and ECDSA key types, and says it can manage keys created with NIST- and BSI-recommended post-quantum algorithms.utimaco.com · read 3 Oct 2026
- Deployment model
- ESKM is available in four models, including a virtual appliance and hardware appliances; its data sheet describes the appliance as Linux-based.support.hsm.utimaco.com · read 3 Oct 2026
- Deployment models
- Models include a virtual L1 appliance and physical L2, L3 and L4 1U appliances.utimaco.com · read 14 Oct 2026
- Documentation
- The v5 datasheet package includes a read-me card, user guide, installation guide and release notes.support.hsm.utimaco.com · read 14 Oct 2026
- External integration evidence
- HPE's Data Fabric documentation supports ESKM releases 4.0 and later and notes that authoritative appliance documentation comes from Utimaco.docs.ezmeral.hpe.com · read 14 Oct 2026
- Hardware security
- The physical ESKM L3 and L4 models include embedded HSMs for local key protection; the product page identifies FIPS 140-2 Level 3 and Level 4 for embedded HSMs.utimaco.com · read 3 Oct 2026
