Kms dedicated hsm design (direct access)

A system, comprising:

• one or more processors;
• and
• a computer-readable medium comprising instructions that, when executed by the one or more processors, cause the system to:
• receiving, by a control server of a computing system, request for access to the secure account partition from a client device, the request comprising a certificate;
• verifying, by the control server of the computing system, the request using the certificate and a trust anchor certificate associated with the client device;
• in response to verifying the certificate:
• establishing, by the control server of the computing system, a first connection between the secure account and the client device;
• establishing, by the computing system, a second connection between the client device and the secure account such that the computing system is isolated from the second connection.

A non-transitory computer-readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• receiving, by a control server of a computing system, request for access to the secure account partition from a client device, the request comprising a certificate;
• verifying, by the control server of the computing system, the request using the certificate and a trust anchor certificate associated with the client device;
• in response to verifying the certificate:
• establishing, by the control server of the computing system, a first connection between the secure account and the client device;
• establishing, by the computing system, a second connection between the client device and the secure account such that the computing system is isolated from the second connection.