AZ494676 - Retirement: hsmPlatform 1 Keys in Azure Key Vault

Azure Updates

Discussionpowered by zap.ms

Published

Sep 15, 2025

Timeline

  • September 2028
    Retirement

Product

Key Vault

Tag

Retirements

Category

Security

Description

As part of our ongoing commitment to improving security and performance, we will be retiring support for hsmPlatform 1 keys, effective September 15, 2028. To ensure the continued security and functionality of your operations, we recommend transitioning to hsmPlatform 2 keys as soon as possible.

How to Identify Affected Resources

To determine which resources are impacted:

Required action

Keys cannot be directly transferred from hsmPlatform 1 to hsmPlatform 2.

To migrate:

1.     Create new keys on hsmPlatform 2.

2.     Rekey or roll your operations to utilize the newly created keys.

For detailed instructions, please refer to this documentation, which outlines the process step by step.

Important Reminder

Avoid deleting the old tenant key until it is no longer needed for content or documents protected under it. If you need to migrate existing documents:

1.     Remove the protection applied with the old tenant key.

2.     Reapply protection using the new tenant key.