3 ms·

> OpenBao wouldn’t solve this for me. I'd bet OpenBao gets native HSM support. The problem will be doing it in a clean room setting to avoid any legal issues.

• firesteelrain 3y ago
  Someone would have to fund it. The compliance issues alone are very expensive.
  • NewJazz 3y ago
    Forgive my ignorance, but what does compliance have to do with HSM support? Aren't they orthogonal features?
    • tucnak 3y ago
      The "HSM support" bit is totally dependant on compliance; it's not about APIs.
      • NewJazz 3y ago
        You didn't answer my question. How is it dependent?
        • wlonkly 3y ago
          The reason people pay Hashicorp for HSM support is so that they can run Vault in a FIPS-certified mode.
  • alemanek 3y ago
    IBM, somewhat unofficially, is behind this recent fork. It might take a bit but if this fork gains traction then I would assume it gets this functionality.