https://store-images.s-microsoft.com/image/apps.7356.b7c72bc1-2906-4066-b672-cfe9e1878ad8.145f2a88-c88e-4264-88c9-23c4c17d66b9.9095965c-cbe3-4816-be90-558759d12fb7

HSM Ingress Controller

Strid Tech

HSM Ingress Controller

Strid Tech

Ingress that integrates with AKV or mHSM to handle TLS offload in AKS for FIPS 140-3 compliance

Protect your Azure Kubernetes cluster's TLS keys from leaking with our Ingress Controller. By offloading TLS termination to your Azure Key Vault or Azure Managed HSM, the keys stay secure, as required by FIPS 140-3 up to level 3.

Click the "Get It Now" button on the upper left to install the ingress into your cluster or create a new cluster for testing. We will get in contact with you shortly or you can reach out to us directly at info@strid.tech.

Key Benefits

No insecure secrets - By terminating TLS directly in the Key Vault we don't need to use the insecure secrets in Kubernetes to manage our private keys.

FIPS 140-3 - By offloading TLS termination to either Azure KeyVault Premium or Azure Managed HSM you can attain FIPS 140-3 level 3 compliance in your cluster ingress*.

Seamless Migration - The Ingress Controller is fully compatible with the open source nginx-ingress and can be configured the same ways for easy replacement of your current solution.

Installation

Extra Azure resources needed are:

  • Azure Key Vault or Azure Managed HSM
  • Service Account with access to the above

* To be FIPS compliant you must use non-exportable keys. Read more about Key Vault and FIPS compliance under "Learn more".

https://store-images.s-microsoft.com/image/apps.44661.b7c72bc1-2906-4066-b672-cfe9e1878ad8.b2ede5ea-822a-4a1c-8e86-95632fa13b9d.9c592792-546c-41f6-a756-9578ac2f04c9
https://store-images.s-microsoft.com/image/apps.44661.b7c72bc1-2906-4066-b672-cfe9e1878ad8.b2ede5ea-822a-4a1c-8e86-95632fa13b9d.9c592792-546c-41f6-a756-9578ac2f04c9