Thales Luna HSM

Overview

QCecuring integrates with Thales Luna Network HSMs to inventory and manage cryptographic keys stored in hardware. The platform enumerates key objects, captures algorithm details, and feeds HSM key data into your organization’s CBOM.

Key capabilities

• Enumerate all key objects across Luna HSM partitions via PKCS#11.
• Capture key attributes: algorithm type, key size, extractability, usage flags.
• Track key creation dates, rotation schedules, and lifecycle status.
• Feed HSM key inventory into your CBOM for PQC readiness assessment.
• Monitor HSM utilization and partition health.

Typical use cases

• Organizations using Luna HSMs for root CA keys, code signing, or encryption who need key inventory.
• Security teams building comprehensive CBOM including hardware-protected keys.
• Compliance programs requiring documentation of HSM-stored cryptographic assets.

High-level integration flow

1. QCecuring connects to Luna HSMs via PKCS#11 or Luna client API.
2. Key objects are enumerated across configured partitions.
3. Key attributes (algorithm, size, usage, extractability) are captured and normalized.
4. HSM key inventory feeds into the centralized CBOM alongside software and cloud crypto assets.