yubihsm2-sdk ☆

« Back to VersTracker

Description:
Libraries and utilities to interact with a YubiHSM 2 natively and via PKCS#11

Type: Cask | Latest Version: 2026-04@0 | Tracked Since: Dec 28, 2025

Links: Homepage | @Yubico | formulae.brew.sh

Category: Security

Tags: yubikey hsm pkcs11 security cryptography

Install: brew install --cask yubihsm2-sdk

About:
The YubiHSM 2 SDK provides the essential libraries and command-line utilities required to configure, manage, and interact with a YubiHSM 2 hardware security module. It includes the native `yubihsm-shell` tool for direct device commands and a robust PKCS#11 provider for integrating hardware-backed key storage into applications like web servers and VPNs.

Key Features:

Native command-line interface (yubihsm-shell) for device management
PKCS#11 library for integration with OpenSSL and other standard applications
Support for secure key generation, storage, and cryptographic operations
Backup and recovery utilities for disaster planning

Use Cases:

Securing TLS private keys for web servers (Nginx, Apache)
Generating and storing Certificate Authority (CA) keys offline
Hardware-backed authentication for VPN infrastructure

Alternatives:

OpenSC – OpenSC is an open-source PKCS#11 provider for many smart cards, whereas YubiHSM 2 SDK is vendor-specific and optimized for the YubiHSM 2 hardware.

Version History

Detected	Version	Change	Commit
Apr 28, 2026 8:08pm	2026-04	VERSION_BUMP	8bc180f0
Mar 12, 2026 10:46pm	2026-03	VERSION_BUMP	bda4b63a
Jan 20, 2026 5:20pm	2026-01	VERSION_BUMP	e2dc5cf8
Aug 5, 2025 6:01pm	2025-06b	VERSION_BUMP	f5d24728
Aug 2, 2025 8:00am	2025-06b	VERSION_BUMP	016c1021
Nov 2, 2023 3:57pm	2023-11	VERSION_BUMP	36cea35f
Jan 25, 2023 1:35am	2023-01	VERSION_BUMP	20b5e63d
Aug 23, 2022 5:16pm	2022-06	VERSION_BUMP	e35c4ac3
Aug 15, 2022 1:32pm	2022-06	VERSION_BUMP	5a532e81
Aug 11, 2022 9:53am	2022-06	VERSION_BUMP	43abf0aa
Aug 6, 2022 12:18pm	2022-06	NEW	96f16a6a