Generally Available: Microsoft Azure Cloud HSM

Azure Cloud HSM is a FIPS 140-3 Level 3, highly available, single-tenant Hardware Security Module (HSM) service built to meet the most stringent security and compliance requirements. It provides customers with full administrative control over their HSMs, enabling them to manage cryptographic keys and perform sensitive cryptographic operations within their own dedicated Cloud HSM cluster.  

Azure Cloud HSM is ideal for organizations migrating security-sensitive applications from on-premises to Azure Virtual Machines, or transitioning from Azure Dedicated HSM or AWS Cloud HSM. It supports PKCS#11, OpenSSL, and JCE, enabling integration with common cryptographic libraries. It's well-suited for running shrink-wrapped software like Apache/Nginx SSL Offload, SQL Server/Oracle TDE, and ADCS on Azure VMs. It supports certificate storage with private keys in HSM via PKCS#11 and supports document and code signing.  

Azure Cloud HSM succeeds and replaces Azure Dedicated HSM, offering enhanced support for general-purpose scenarios that demand isolated, secure key management. Stay tuned as we enhance Azure Cloud HSM and expand globally across Public, US Gov, and Sovereign Clouds. 

Learn more.