EVERYTHING XIAOMI
Get listed
Utimaco Enterprise Secure Key Manager logo

Utimaco Enterprise Secure Key Manager

Utimaco Enterprise Secure Key Manager (ESKM) centralizes cryptographic key administration across on-premises and cloud environments.

Place
#2 of 25
Score
6.5

What Utimaco Enterprise Secure Key Manager is

Utimaco Enterprise Secure Key Manager (ESKM) centralizes cryptographic key administration across on-premises and cloud environments. It provides policy controls and audit trails for key lifecycle management, alongside monitoring, recovery, scheduled backups, log rotation, and restore functions. Administrators can work through a web GUI or command-line interface. ESKM supports OASIS KMIP, a RESTful API, and a native XML-based KMS protocol; its client library support includes KMIP, OpenKMIP, and PyKMIP, with conformance to KMIP specifications 1.0 through 2.1. The product page states capacity for more than 2 million keys, over 25,000 clients, and thousands of nodes in a distributed cluster. Four models are available, including Linux-based virtual and hardware appliances. Physical L3 and L4 models include embedded HSMs identified as FIPS 140-2 Level 3 and Level 4; the virtual L1 is a hardened appliance with FIPS 140-2 Level 1 security. Pricing is available on request.

Good

  • Centralized key lifecycle controls and audit trails.
  • Supports KMIP, REST, and native XML protocol.
  • Four virtual and hardware models are listed.
  • Embedded HSMs are included in physical L3 and L4 models.
  • Lists integrations including Azure, VMware, and Kubernetes.

Watch out

  • Pricing is available on request.
  • Deployment choices involve four distinct models.
  • Physical embedded HSMs are specified for L3 and L4 models.

Who it suits

ESKM may suit organizations managing keys across cloud and on-premises systems that need centralized policies and audit trails. Its listed interfaces and integrations may be relevant to teams using the named platforms and services.

Verdict

ESKM offers centralized key management, multiple interfaces, and several deployment models for on-premises and cloud environments. Prospective buyers need to request pricing and determine which model fits their requirements.

Plans and prices

From Utimaco Enterprise Secure Key Manager's own pricing page, checked 14 Oct 2026.

All about pricing
PlanPriceWhat it gives you
Enterprise Secure Key ManagerPriced on requestESKM L1 virtual appliance · L2-L4 1U hardware appliances · client licensing
Enterprise Secure Key Manager (ESKM)Priced on requestTransparent client licensing · no hidden costs tied to key volume or scalability · four models

The facts

Each one read from Utimaco Enterprise Secure Key Manager's own pages, with the date it was checked.

What it does

APIs
ESKM exposes OASIS KMIP, a REST interface and a KMS interface.checked 14 Oct 2026
AWS BYOK
The AWS integration generates keys in ESKM and imports them into AWS Key Management Service.checked 14 Oct 2026
Azure BYOK
The Azure integration lets customers keep key ownership in ESKM while Azure Key Vault uses the imported keys.checked 14 Oct 2026
Capacity
The datasheet states capacity above two million keys, more than 25,000 clients and up to eight ESKM nodes in a distributed cluster.checked 14 Oct 2026
Centralized lifecycle
The product centralizes key creation, storage, use, rotation and deletion for on-premises and cloud environments.checked 14 Oct 2026
Client libraries
The product page says it supports open client libraries including KMIP, OpenKMIP, and PyKMIP, and conforms to KMIP specifications 1.0 through 2.1.checked 3 Oct 2026
Common Criteria
The ESKM v5.1 security target claims Common Criteria EAL2 augmented conformance.checked 14 Oct 2026
Compliance
Utimaco lists FIPS 140-2 levels 1 through 4 by model, NIST SP 800-131A, Common Criteria EAL2+, PCI-DSS controls and HIPAA support; FIPS 140-3 Level 2 is described as pending.checked 14 Oct 2026
Cryptography
The product page lists AES, 3-Key Triple DES, HMAC, RSA, and ECDSA key types, and says it can manage keys created with NIST- and BSI-recommended post-quantum algorithms.checked 3 Oct 2026
Deployment model
ESKM is available in four models, including a virtual appliance and hardware appliances; its data sheet describes the appliance as Linux-based.checked 3 Oct 2026
Deployment models
Models include a virtual L1 appliance and physical L2, L3 and L4 1U appliances.checked 14 Oct 2026
Documentation
The v5 datasheet package includes a read-me card, user guide, installation guide and release notes.checked 14 Oct 2026
External integration evidence
HPE's Data Fabric documentation supports ESKM releases 4.0 and later and notes that authoritative appliance documentation comes from Utimaco.checked 14 Oct 2026
Hardware security
The physical ESKM L3 and L4 models include embedded HSMs for local key protection; the product page identifies FIPS 140-2 Level 3 and Level 4 for embedded HSMs.checked 3 Oct 2026
High availability
ESKM supports multi-site clustering, node failover and encrypted replication of keys and configuration.checked 14 Oct 2026
Hypervisors
The vESKM trial page lists VMware vSphere, Hyper-V, KVM and Proxmox as supported deployment hypervisors.checked 14 Oct 2026
Integrations
Utimaco publishes integration guides for AWS BYOK, Azure BYOK, Google Workspace, Kubernetes, VMware, Dell, HPE, NetApp, Oracle Cloud, Veeam, Splunk, MySQL and other systems.checked 14 Oct 2026
Interfaces
The product supports OASIS KMIP, a RESTful API, and a native XML-based KMS protocol.checked 3 Oct 2026

The company

Company
Utimaco says it is headquartered in Aachen, Germany, and Campbell, California.checked 3 Oct 2026
Company foundation
LinkedIn lists Utimaco's founding year as 1983 and headquarters in Aachen, North Rhine-Westphalia.checked 14 Oct 2026
Company legal name
The Microsoft Azure Marketplace listing identifies the publisher as Utimaco IS GmbH.checked 14 Oct 2026
Company size
LinkedIn lists Utimaco as privately held with 501-1,000 employees.checked 14 Oct 2026
Founded
Utimaco says it was founded by Horst Görtz in 1983.checked 3 Oct 2026
Headquarters
Aachen, Germany and Campbell, California, USAchecked 28 Sep 2026

Alternatives to Utimaco Enterprise Secure Key Manager

All alternatives
  1. 1

    Google Cloud Secret Manager

    Free planWeb
    6.5From $0.02 a month
    Visit
  2. 2

    OpenStack Barbican

    Free planAPILinuxSelf-hosted
    6.1Free plan
    Visit
  3. 3Cryptsoft KMIP Server logo

    Cryptsoft KMIP Server

    WebAPILinuxSelf-hosted
    6.0
    Visit
  4. 4

    Kleopatra

    Free planLinuxWindows
    6.0Free plan
    Visit
  5. 5AWS Key Management Service logo

    AWS Key Management Service

    WebAPI
    5.9From $1 a month
    Visit
  6. 6Fornetix Key Orchestration Platform logo

    Fornetix Key Orchestration Platform

    WebAPILinuxSelf-hosted
    5.9
    Visit