# YubiHSM 2 v2.4 Hardware Security Module USB-A Black 12mm x 13mm x 3.1mm

**URL:** https://aio.lv/en/product--yubico-5060408465462--10955678
**Data updated:** 2025-09-28 02:48 (EEST)
**Category:** Electronics Accessories
**Manufacturer:** Yubico
**Manufacturer code:** 5060408465462
**EAN:** 5060408465462
**Warranty:** 2 Years
**Availability:** Available for order
**Price:** 963.99 €
**Prices and availability valid until:** 2026-08-07 23:59
**Price without VAT (21%):** 796.69 EUR
**Can be purchased by legal entities:** Yes (invoice)
**Buy:** https://aio.lv/en/product--yubico-5060408465462--10955678

## Delivery options

| Delivery method | Delivery time | Cost |
|---|---|---|
| Office pickup (2b. Kengaraga str., Riga, Latvia, LV-1063) | 06.08.2026 | free |
| Pickup points | 11.08.2026 | 1.89 EUR |
| Courier delivery to door | 11.08.2026 | 4.99 EUR |

## Summary description

The YubiHSM 2 v2.4 is a compact hardware security module designed for secure authentication and cryptographic operations. With USB-A connectivity, it supports various operating systems including Windows, Linux, and macOS. Its small dimensions (12mm x 13mm x 3.1mm) make it portable and easy to integrate into existing systems. The module utilizes Microsoft CNG and PKCS#11 specifications, ensuring compatibility with a wide range of applications.

## Long description

The YubiHSM 2 is a compact hardware security module designed to protect cryptographic keys, including Certificate Authority (CA) root keys, from copying, theft, and unauthorized use. It provides secure on-chip generation, storage, and use of keys, and integrates with an open-source SDK and standard interfaces such as PKCS#11 and YubiHSM KSP. Typical deployments include protecting Microsoft Active Directory Certificate Services, securing digital signature operations, and safeguarding keys in cryptocurrency and IoT environments.
Advantages
The YubiHSM 2 delivers hardware-isolated key protection throughout the key lifecycle: secure generation, attestation, storage, distribution, backup, and destruction. It supports role-based access control, tamper-evident audit logging, remote management, and optional network sharing. Its nano USB form factor fits fully into a USB-A port for low power consumption and concealed deployment. The device is accessible to applications through native libraries and industry standards, enabling rapid integration with existing systems and low-volume cryptographic operations.
Key specifications
Supported algorithms: RSA, ECC, ECDSA (including ed25519), SHA-2, AES (ECB/CBC modes for non-FIPS)
Interfaces: YubiHSM KSP, PKCS#11, native libraries for Windows, Linux, macOS
Secure session: mutually authenticated, integrity- and confidentiality-protected tunnel
Access control: role-based security domains and authentication keys
Connections: up to 16 concurrent sessions
Form factor: nano USB (fully insertable into USB-A port), max power 30 mA
Backup/restore: M-of-N wrap key support; asymmetric backup introduced in v2.4
Features added in v2.4: asymmetric backups, BYOK (Bring Your Own Key), updated in-house crypto library for RSA/ECC
Logging: tamper-evident, hash-chained audit log exportable for monitoring
Deployment: optionally network-shareable and remotely manageable
How to use
Integrate the YubiHSM 2 with your application using the provided SDK, PKCS#11, or the YubiHSM KSP for Microsoft CNG. Create or import keys into the device and assign access rights per security domain and authentication key. Perform cryptographic operations (signing, decryption, hashing, key wrapping) directly on-device to keep private keys protected. Configure remote management and, if needed, enable network sharing for multi-server environments. For backups, use M-of-N wrap key procedures or the asymmetric backup feature introduced in v2.4, and follow organization policies for BYOK when applicable.
Recommendations
Use YubiHSM 2 to protect CA private keys, signing services, and other high-value cryptographic assets. Apply least-privilege role assignments, enable tamper-evident audit logging, and adopt M-of-N backup rules to prevent single-person access to key export and restore operations. For Microsoft PKI, deploy the device with YubiHSM KSP; for broad application support, integrate via PKCS#11 or native libraries. Keep firmware and cryptographic libraries updated and follow vendor guidance for secure deployment.

## Specifications

| Feature | Value |
|---|---|
| Interface | USB Type-A |
| Weight | 0.001 kg |
| Height | 3.1 mm |
| Authentication method | Authentication key |
| Width | 12 mm |
| Depth | 13 mm |
| Quantity | 1 |
| Product colour | Black |
| Country of origin | Sweden, United States |
| Cryptographic specifications | Microsoft CNG (KSP) PKCS#11 (Windows, Linux, macOS) Native YubiHSM Core Libraries (C, python), RSA, ECC, ECDSA (ed25519), SHA-2, AES (ECB/CBC mode for non-FIPS only) |
| Compliance certificates | RoHS, Federal Communications Commission (FCC), WEEE, CE |

## FAQ

### How much does the YubiHSM 2 v2.4 Hardware Security Module Yubico cost, and is it available for purchase?

The price is 963.99 € (valid at the time of publication and already includes all taxes). The item is available for order — 1 pcs. are in stock, and you can place your purchase right now with delivery across Latvia and Europe or choose pickup at the Riga collection point. We offer favorable purchase terms, including the option to split the payment into convenient monthly installments. Availability and price are updated in real time, so we recommend placing your order in advance.

### If I order this product today, when will I receive my order?

If you place your order today, delivery will be as fast and convenient as possible. You will be able to pick up your order on 06.08.2026 at the Riga pickup point or choose delivery across Latvia and Europe. We carefully inspect every purchase and pack it securely for safe transportation.

### What payment options are available?

AiO.lv offers several payment methods: Bank transfer, Leasing for legal entities. All transactions are 100% secure and encrypted.

### Can this product be purchased for a company (with VAT)?

Yes. AiO.lv works with legal entities in Latvia and across Europe. The product price already includes VAT. For certain product categories, as well as for companies from other EU countries with a valid VAT number, a 0% VAT rate may apply. We issue the invoice immediately after the order is placed, support electronic BIS invoices, and automatically generate all necessary accounting documents. You can complete the purchase for a company online — simply select the company profile and choose bank transfer as the payment method during checkout.

### What is the warranty period?

All Yubico products come with an official 2 Years warranty. It covers all manufacturing defects and malfunctions that may occur during use. The warranty is valid at all authorized Yubico service centers and through AiO.lv

### Can the product be returned after purchase?

Yes, you can return the product within 14 days of purchase if you bought it as a consumer (not a legal entity). Returns are possible without giving any reason — the main condition is that the product retains its original appearance and full set of accessories. We will make the process as simple and convenient as possible: just contact our customer support team, and we will help you arrange the return.

### Where should I contact for warranty service?

For warranty-related questions you can contact the AiO.lv (SIA VSPRO) customer support team. More information about warranty service: https://aio.lv/en/warranty

## Image

https://aio.lv/img/cache/product/10955678/64474101_large.webp