QuintessenceLabs Trusted Security Foundation

quintessencelabs.com

WebLinuxAPISelf-hosted

Spec score 7.2 #11 of 24 in Encryption Key Management Software

What it is

QuintessenceLabs Trusted Security Foundation (TSF) is a centralized manager for cryptographic keys and policies across the key lifecycle. It is offered as a virtual machine or hardware appliance; TSF 100 virtual appliances can run locally or on AWS, Azure, and GCP. Product materials describe policies for objects and users, plus replication across up to 16 nodes. The TSF range supports OASIS KMIP and has been tested with products from IBM, HP, Oracle, and NetApp. Listed capabilities cover one-time pad, symmetric and asymmetric ciphers, key derivation, random objects, certificates, and selected cryptographic operations. Administrators can use web HTTPS or command-line SSH interfaces. The product sheet states support for thousands of end-client systems, tens of millions of keys, and 8,000 key requests per minute per node. The maker says TSF 400 contains an Entrust nShield XC FIPS 140-3 Level 3 validated HSM as a root of trust. TSF is under evaluation for Common Criteria NDcPP compliance. The maker also states that its key management application is compliant with NIST SP 800-57 where applicable. Pricing is available on request, with configurations tailored to different needs.

Spec sheet

Purpose: TSF is a centralized, vendor-neutral key and policy manager that manages cryptographic keys over their lifecycle.Read 3 Oct 2026 · quintessencelabs.com
Deployment: TSF is offered as a virtual machine or hardware appliance; TSF 100 virtual appliances can run locally or on AWS, Azure, and GCP.Read 3 Oct 2026 · quintessencelabs.com
Headquarters: Canberra, AustraliaRead 28 Sep 2026 · quintessencelabs.com
Founded: 2008Read 28 Sep 2026 · quintessencelabs.com
Certification status: The maker's compliance page says TSF is under evaluation for Common Criteria NDcPP compliance.Read 3 Oct 2026 · quintessencelabs.com
Classified use: The maker says TSF 400 has been reviewed by NSA for conformity with CSfC KGS Approval Criteria and the Symmetric Key Management Requirements Annex.Read 3 Oct 2026 · quintessencelabs.com
Cryptography: TSF supports one-time pad, symmetric and asymmetric key ciphers, key derivation, random objects, certificates, and some cryptographic operations.Read 3 Oct 2026 · quintessencelabs.com
Hardware security: The maker says TSF 400 contains an Entrust nShield XC FIPS 140-3 Level 3 validated HSM that acts as a root of trust.Read 3 Oct 2026 · quintessencelabs.com
Interoperability: The TSF product range supports OASIS KMIP and has been tested with products from IBM, HP, Oracle, and NetApp.Read 3 Oct 2026 · quintessencelabs.com
Management interfaces: The TSF specification lists web HTTPS and command-line SSH management interfaces.Read 3 Oct 2026 · quintessencelabs.com
Policies and availability: The product sheet says TSF supports object and user policy management and built-in replication of up to 16 nodes.Read 3 Oct 2026 · quintessencelabs.com
Pricing: The opened product pages and product sheet provide no listed price and direct readers to contact QuintessenceLabs for information.Read 3 Oct 2026 · quintessencelabs.com
Scale: The product sheet states TSF supports thousands of end-client systems, tens of millions of keys, and 8,000 key requests per minute per node.Read 3 Oct 2026 · quintessencelabs.com
Standards: The maker says the TSF key management application is 100% compliant with NIST SP 800-57 where applicable.Read 3 Oct 2026 · quintessencelabs.com
VMware integration: The maker describes TSF as a VMware by Broadcom Certified Key Management Server for vSphere VM Encryption.Read 3 Oct 2026 · quintessencelabs.com

Plans and prices

Trusted Security Foundation (TSF) Priced on request TSF 100 virtual machine · TSF 200/300/400 hardware appliances · configurations tailored to different needs Read 3 Oct 2026 · quintessencelabs.com

Every QuintessenceLabs Trusted Security Foundation plan and price →

Strong points and limits

Strong points

Available as a virtual machine or hardware appliance.
Built-in replication supports up to 16 nodes.
Supports OASIS KMIP.
TSF 400 contains an HSM described as a root of trust.

Limits

Pricing is available only on request.
Common Criteria NDcPP compliance is under evaluation.
Configurations are tailored to different needs.

Who it suits

TSF suits organizations that need centralized key and policy management across virtual or hardware deployments. Its listed interfaces and KMIP support may be relevant to teams managing keys across compatible products.

Verdict

TSF offers key lifecycle management with multiple deployment options, policy controls, and stated support for large key workloads. Buyers should request pricing and account for the product's stated compliance evaluation status.