I need to buy an HSM for a project (need it for compliance with government regulations) and I am kind of confused. Price range is really wide. I can see used THALES nCipher HSMs on eBay for as low as 300$ and as high as 10,000$, even though modules are similar according to Entrust (now THALES nCipher owner) website.
Anyway. Two questions:
1. What should I take into consideration if I want to buy a used model?
2. What would be your general recommendation on the TOPIC?
I am planning to deploy EJBCA as the API/FrontEND of the HSM to integrate it with my platforms.