Qinsight Atlas - Utimaco Joint Solution Brief
Hardware-Backed Crypto Visibility for PQC. Qinsight has integrated its Atlas Cryptographic Posture Management platform with the Utimaco u.trust GP HSM Se-Series, so organizations can discover and inventory hardware-backed cryptographic assets within their broader estate. Using the Utimaco REST Cryptographic API (RCAPI) over a mutually authenticated (mTLS) channel, Atlas fetches key and certificate metadata to build a living inventory and generate a Cryptographic Bill of Materials (CBOM).
Atlas connects to the Utimaco u.trust GP HSM Se-Series through the REST Cryptographic API (RCAPI v2.1.1) over a mutually authenticated TLS channel. A dedicated, read-only RCAPI user authenticates, and the Atlas discovery engine fetches metadata for keys and certificates, including algorithm, key size, and rotation lifecycle. Findings are normalized into the Atlas data model, reconciled with other discovery sources, and compiled into a CycloneDX 1.7 CBOM. Qinsight’s risk scoring engine then scores each asset for classical and quantum risk by looking at the algorithm and bit size, exposure and compliance context and dependencies. At no point are private keys read or removed; they remain inside the HSM’s hardware boundary.
Unified Hardware Discovery Automatically discover keys and certificates stored within Utimaco u.trust GP HSMs and incorporate them into a unified, enterprise-wide cryptographic inventory and CBOM.
Quantum Risk Prioritization Score HSM-resident algorithms and key sizes against NIST PQC standards to flag quantum-vulnerable assets and prioritize migration based on business risk.
Audit-Ready Evidence Generate audit-ready CycloneDX CBOM documenting hardware-protected cryptography for CNSA 2.0, PCI-DSS, DORA and HIPAA compliance reviews.
Subscribe to our weekly newsletter
Receive weekly insights on cryptographic risks, emerging security standards and quantum readiness.
