
QuintessenceLabs Trusted Security Foundation
QuintessenceLabs Trusted Security Foundation (TSF) centrally manages cryptographic keys and policies across the key lifecycle.
What QuintessenceLabs Trusted Security Foundation is
QuintessenceLabs Trusted Security Foundation (TSF) centrally manages cryptographic keys and policies across the key lifecycle. It is offered as a virtual machine or hardware appliance; TSF 100 virtual appliances can run locally or on AWS, Azure, and GCP. Product materials describe policies for objects and users, along with built-in replication for up to 16 nodes. The TSF range supports OASIS KMIP and has been tested with products from IBM, HP, Oracle, and NetApp. Listed cryptographic capabilities include one-time pad, symmetric and asymmetric key ciphers, key derivation, random objects, certificates, and selected cryptographic operations. Administrators can use web HTTPS or command-line SSH interfaces. The maker says TSF 400 includes an Entrust nShield XC FIPS 140-3 Level 3 validated HSM as a root of trust, while TSF is under evaluation for Common Criteria NDcPP compliance. The maker also states that the key management application is compliant with NIST SP 800-57 where applicable. Pricing is available on request, with configurations tailored to different needs.
Good
- Available as a virtual machine or hardware appliance.
- Built-in replication supports up to 16 nodes.
- Supports OASIS KMIP.
- Offers web HTTPS and SSH management interfaces.
Watch out
- Pricing is available only on request.
- Common Criteria NDcPP compliance is still under evaluation.
Who it suits
TSF is aimed at organizations that need centralized management of cryptographic keys and policies. Its virtual and hardware deployment options and KMIP support may suit teams with varied environments.
Verdict
TSF provides centralized key and policy management with virtual and hardware deployment choices. Prospective buyers will need to contact QuintessenceLabs for pricing and should note the stated compliance evaluation status.
Plans and prices
From QuintessenceLabs Trusted Security Foundation's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Trusted Security Foundation (TSF) | Priced on request | TSF 100 virtual machine · TSF 200/300/400 hardware appliances · configurations tailored to different needs |
The facts
Each one read from QuintessenceLabs Trusted Security Foundation's own pages, with the date it was checked.
What it does
- Certification status
- The maker's compliance page says TSF is under evaluation for Common Criteria NDcPP compliance.checked 3 Oct 2026
- Classified use
- The maker says TSF 400 has been reviewed by NSA for conformity with CSfC KGS Approval Criteria and the Symmetric Key Management Requirements Annex.checked 3 Oct 2026
- Cryptography
- TSF supports one-time pad, symmetric and asymmetric key ciphers, key derivation, random objects, certificates, and some cryptographic operations.checked 3 Oct 2026
- Deployment
- TSF is offered as a virtual machine or hardware appliance; TSF 100 virtual appliances can run locally or on AWS, Azure, and GCP.checked 3 Oct 2026
- Hardware security
- The maker says TSF 400 contains an Entrust nShield XC FIPS 140-3 Level 3 validated HSM that acts as a root of trust.checked 3 Oct 2026
- Interoperability
- The TSF product range supports OASIS KMIP and has been tested with products from IBM, HP, Oracle, and NetApp.checked 3 Oct 2026
- Management interfaces
- The TSF specification lists web HTTPS and command-line SSH management interfaces.checked 3 Oct 2026
- Policies and availability
- The product sheet says TSF supports object and user policy management and built-in replication of up to 16 nodes.checked 3 Oct 2026
- Pricing
- The opened product pages and product sheet provide no listed price and direct readers to contact QuintessenceLabs for information.checked 3 Oct 2026
- Purpose
- TSF is a centralized, vendor-neutral key and policy manager that manages cryptographic keys over their lifecycle.checked 3 Oct 2026
- Scale
- The product sheet states TSF supports thousands of end-client systems, tens of millions of keys, and 8,000 key requests per minute per node.checked 3 Oct 2026
- Standards
- The maker says the TSF key management application is 100% compliant with NIST SP 800-57 where applicable.checked 3 Oct 2026
- VMware integration
- The maker describes TSF as a VMware by Broadcom Certified Key Management Server for vSphere VM Encryption.checked 3 Oct 2026
The company
- Founded
- 2008checked 28 Sep 2026
- Headquarters
- Canberra, Australiachecked 28 Sep 2026
Alternatives to QuintessenceLabs Trusted Security Foundation
- 1
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 2

Utimaco Enterprise Secure Key Manager
WebAPILinuxSelf-hosted6.5 - 3
OpenStack Barbican
Free planAPILinuxSelf-hosted6.1Free plan - 4

Cryptsoft KMIP Server
WebAPILinuxSelf-hosted6.0 - 5
Kleopatra
Free planLinuxWindows6.0Free plan - 6
5.9From $1 a month
