Azure Cloud HSM is a FIPS 140-3 Level 3,
highly available, single-tenant Hardware Security Module (HSM) service built to
meet the most stringent security and compliance requirements. It provides
customers with full administrative control over their HSMs, enabling them to
manage cryptographic keys and perform sensitive cryptographic operations within
their own dedicated Cloud HSM cluster.
Azure Cloud HSM is ideal for organizations migrating
security-sensitive applications from on-premises to Azure Virtual Machines, or
transitioning from Azure Dedicated HSM or AWS Cloud HSM. It supports PKCS#11,
OpenSSL, and JCE, enabling integration with common cryptographic libraries.
It's well-suited for running shrink-wrapped software like Apache/Nginx SSL
Offload, SQL Server/Oracle TDE, and ADCS on Azure VMs. It supports certificate
storage with private keys in HSM via PKCS#11 and supports document and code
signing.
Azure Cloud HSM succeeds and replaces Azure Dedicated HSM, offering
enhanced support for general-purpose scenarios that demand isolated, secure key
management. Stay tuned as we enhance Azure Cloud HSM and expand globally across
Public, US Gov, and Sovereign Clouds.
Learn more.