Nitrokey HSM 2
Secure Key Storage With Professional Key Management What was previously only provided by expensive and proprietary hardware security modules (HSM) is now available as open hardware at an unbeatably low price from Germany. Nitrokey HSM reliably protects your cryptographic keys with encrypted backups, two-man rule as access protection, and many other security features. With a USB interface, Nitrokey HSM is the ideal solution for certificate infrastructures of any type and size. Applications Operating PKI and CA Nitrokey HSM provides secure key generation, storage, and management for public key infrastructures (PKI), certificate authorities (CA), and other central signing keys. Technical security features replace expensive organizational protection measures such as storing keys in safe deposit boxes, and even protect keys for large and changing teams. Fulfilling Compliance Requirements (e.g., PCI DSS) According to PCI DSS, keys that encrypt or decrypt credit card data must be securely stored at all times. Nitrokey HSM is a fundamental component that helps you to meet PCI DSS requirements and to achieve your PCI DSS certification. Internet of Things (IoT) and Protecting Your own Products P
- Fulfilling Compliance Requirements (e.g
- Internet of Things (IoT) and Protecting Your own Products P
- Brand
- Nitrokey
- Model
- Nitrokey HSM 2
- Type
- Hardware security token
- Standards
- FIDO2 / WebAuthn / OpenPGP / PIV
- Interface
- USB / NFC
- Warranty
- 24 months
Frequently asked
- Does Nitrokey HSM 2 support FIDO2 / WebAuthn?
- Yes. Nitrokey HSM 2 implements FIDO2 / WebAuthn and works as a passkey for any service that accepts a security key.
- Does it support OpenPGP and PIV?
- Nitrokey keys in this listing implement OpenPGP for code-signing and email, and PIV for smart-card login. Confirm the exact applet set on the spec sheet above.
- USB-A, USB-C, NFC or Lightning?
- Connector type is listed in the specifications. Choose the form factor that matches your laptop and phone.
- Can I use Nitrokey HSM 2 with iPhone?
- Yes — over NFC or via the Lightning / USB-C model. Apple supports security keys for Apple ID and for any WebAuthn site in Safari.
- Does Nitrokey HSM 2 work with Google, Microsoft, GitHub, AWS?
- Yes. All major identity providers accept FIDO2 hardware keys including Nitrokey.
- What happens if I lose the key?
- Best practice is to enroll two keys on every account. We sell two-packs for exactly this reason.
- Is the firmware open source?
- Some Nitrokey keys ship open-source firmware; others closed. Spec sheet above lists firmware status per model.
- Can Nitrokey HSM 2 sign git commits?
- Yes via OpenPGP — pair with gpg-agent or with sigstore for keyless variants.
- How is Nitrokey HSM 2 shipped?
- Discreetly via tracked international courier. Packaging carries no Exotec or product branding.
- Do you ship to my country?
- We ship worldwide except to OFAC-sanctioned jurisdictions. See our Restricted Countries policy for the current list.
