iShield HSM: Swissbit launches hardware security module for AWS IoT Greengrass

iShield HSM: Swissbit launches hardware security module for AWS IoT Greengrass

Retrofittable plug-and-play USB security anchor for storing security keys in IoT environments

Bronschhofen, Switzerland, October 25, 2022 — Swissbit has expanded the company’s product line of plug-and-play security modules to include the iShield HSM hardware security module. The hardware security module (HSM), which looks like a USB-A flash drive, securely stores encryption keys and credentials required for identity, authentication and registration of IoT devices. iShield HSM is designed and certified for hardware security integration (HSI) in AWS IoT Greengrass. Therefore, system integrators can easily upgrade existing AWS IoT Greengrass devices, such as gateways and industrial controllers, by adding this hardware security module. When an iShield HSM is connected, it provides the highest level of hardware-secure storage for the corresponding IoT device's private keys and certificates. The secure element (CC EAL6+) is integrated into the device via chip-on-board packaging technology. This makes iShield HSM not only tamper-proof, but also makes it an ideal solution for use in harsh work environments.

While using software-based encryption key storage to protect IoT devices is standard practice, this approach is susceptible to accidental disclosure or deliberate theft of private keys by hackers.

Secure hardware protection for storing encryption keys

Swissbit's latest reinstallable iShield HSM hardware security module uses a standard USB interface and is extremely flexible. iShield HSM is compatible with both the open source edge runtime and AWS IoT Greengrass cloud services, making it a perfect choice for existing hardware designs and devices already in the field. Device private keys and certificates cannot be copied, extracted, and accessed by software because they are stored in a tamper-resistant hardware security module.

iShield HSM uses a compact and rugged metal casing of an industrial-grade USB flash drive. It is produced by Swissbit in its own factory in Berlin, Germany. The plug-and-play security anchor is compatible with the open source software stack OpenSC and supports PKCS#11 and PKCS#15 encryption standards.

Compatibility and availability

Swissbit is an AWS Advanced Technology Partner, and iShield HMS has passed AWS IoT Greengrass Hardware Security Integration (HSI) certification. For more information, please click on the AWS Partner Device Catalog.

iShield HSM is available through Swissbit online partner stores (Mouser Electronics, element14 and Digi-Key) and other distribution partners.

Available images

The following images can be downloaded in print-quality original form from: https://kk.htcm.de/press-releases/swissbit/

Swissbit iShield HSM in AWS IoT Greengrass architecture.