Thales TCT Luna Backup Hardware Security Module

The Luna T-Series Backup is widely used by government agencies to securely backup high value cryptographic key material. This accessory to Luna T-Series Network, PCIe, and Tablet HSMs enables you to reduce risks, maintain SLAs, and ensure regulatory compliance, ensuring your critical data is securely stored offline. Meeting government mandates for U.S. Supply Chain Luna T-Series Backup HSM is designed, developed, manufactured, sold, and supported in the United States by Thales Trusted Cyber Technologies (TCT).

Secure Backup

Maintaining keys in hardware throughout their life-cycle is a best practice mandated by system security auditors and certification bodies responsible for attesting to the security status of cryptographic systems.

The Luna T-Series Backup HSM ensures your sensitive cryptographic material remains strongly protected in the hardware even when not being used. You can easily backup and duplicate keys securely to the Luna Backup HSM for safekeeping in case of emergency, failure or disaster. The remote backup capabilities allow administrators to securely replicate sensitive cryptographic key material to other Luna HSMs. With a single Luna Backup HSM, an administrator can backup and restore keys to and from up to 20 partitions.

The Luna T-Series Backup HSM provides the same level of security as the Luna Network and PCIe HSMs in a convenient, small and low-cost form factor.

Highest Security & Compliance

  • Keys always remain in FIPS validated*, intrusion-resistant, tamper-evident hardware
  • Remote management, backup and restoration for quick disaster recovery
  • LCD display enables quick review of status including firmware, memory capacity, and more
  • Standalone support of Quorum (MofN) multi-factor authentication for increased security

Built for Ease of Use

  • Easy setup – up and running in minutes
  • Portable, handheld, small form factor device
  • LCD display enables quick review of status including firmware, memory capacity, and more
  • Token authentication with dedicated USB port
  • Host powered USB – no need for a power adaptor

High Assurance Security

  • Keys always remain in FIPS 140-3 validated*, intrusion-resistant hardware
  • Remote management, backup, and restore for quick disaster recovery
  • Password Authentication or Quorum (MofN) multi-factor authentication for increased security and strong separation of duties

Technical Specifications

Luna T-Series Backup HSM (T-30B)

  • 1 partition, 32MB

Operating System Support

  • Windows, Linux Client
  • Cryptographic API Support
  • PKCS#11, Java (JCA/JCE), Microsoft CAPI and CNG, OpenSSL

Security Certification

  • FIPS 140-3 Level 3*

Physical Characteristics

  • Dimensions: 6.3” x 3.43” x 1.03” (160.02mm x 87.12mm x 26.16mm)
  • Weight: 0.9lb (410g)
  • 4.7” LCD display
  • Temperature:
    • Operating 0°C – 40°C
    • Storage -20°C – 70°C
  • Relative Humidity: 20% to 95% (38°C) non-condensing
  • Power Consumption: 7.2W maximum, 4.5W typical
  • External USB AC: Input Voltage: 100 – 240V, 50 – 60Hz /Output 5VDC 3A
  • Host Interface: USB 3.0 Type C connector
  • Peripheral Interface: USB 3.0 Type C connector + USB-C (M) to USB-A (F) adapter

Safety and Environmental Compliance

  • UL, CSA, CE
  • FCC, KC Mark, VCCI, CE
  • RoHS, WEEE


  • MTBF: 560073 hrs@40C, Telcordia SR-332, Issue C

Trade Agreement Compliance

  • TAA

*FIPS Validation in process.


Product Brief: Luna T-Series Backup HSM