Skip to main content
illustration of woman and key shape with cloud in background

Take Your Keys to the Cloud

The Cloud Integration Option Pack (CIOP) lets cloud service users generate keys in their own environment and export them for use in the cloud while having confidence that their key has been generated securely using a strong entropy source and the long-term storage of their key is protected by a FIPS-certified HSM. Supported cloud services include Amazon Web Services (AWS), Google Compute Engine, Microsoft Azure and Salesforce.

Beyond Security

Cloud Integration Option Pack Benefits

cloud rainbow icon
Secure cloud integration

Rely on FIPS 140-2 Level 3 certified HSMs to generate, wrap, and securely deliver your keys to your cloud applications.

key icon
Key Availability Control

Control when keys are generated and exported from your on-prem nShield HSMs or nShield as a Service HSMs.

shopping bag icon
Cloud Provider Choice

Get nShield high-assurance key generation and protection with any cloud provider you choose for each key and for your apps.

Tech Specs

nShield Cloud Integration Option Pack is supported on all current nShield HSM models.

Requires nShield Security World Software v12.60 and firmware v12.60 or later for Azure BYOK.

Requires nShield Security World Software v12.40 software for AWS and Google Compute Engine.

Requires nShield Security World Software v12.70 and v12.70 firmware or later for SalesForce use.

Platform Support

This release has been tested for compatibility on a range of platforms including:

  • Microsoft Windows Server 2019 x64 and 2016 x64
  • Microsoft Windows 10 x64 and 7 x64
  • Red Hat Enterprise Linux 7 x64 and AS/ES 6 x86/x64
  • SUSE Enterprise Linux 12 x64 and 11 x64
  • Oracle Enterprise Linux 7.6 x64 and 6.10 x64

What our customers are saying...

Square logo
Verifone logo
Memjet logo
Polycom logo


We have a long history together and we’re extremely comfortable continuing to rely on Entrust solutions for the core of our business. We have used Entrust HSMs for five years and they have always been exceptionally reliable. We’ve layered a lot of code on top of the HSM; it delivers the performance we need and has proven to be a rock-solid foundation.

Neal Harris, Security Engineering Manager, Square, Inc


As a global payment solutions and commerce enablement leader, Verifone’s strategy is to develop and deploy “best in class” payment solutions and services that meet or exceed global security standards and help our clients securely accept electronic payments across all channels of commerce. We selected Entrust HSMs to provide robust security, unmatched performance, and superior scalability across our payment security platforms…

Joe Majka, Chief Security Officer, Verifone


The Entrust nShield sales team provided excellent local and remote support during this evaluation period and was invaluable to the process. The excellent depth, breadth, and quality of the product documentation gave us confidence that the solution was well thought-out and supported.

Robert Fairlie-Cuninghame, QAI Technical Lead/Architect, Memjet


Entrust provided the expertise needed to design and implement a tailored, secure VoIP solution.

Marek Dutkiewicz, Polycom