Azure Cloud HSM integration guides

Microsoft Azure Cloud HSM offers a suite of integration guides to help customers securely connect their applications and systems to Azure hardware security modules. These guides provide detailed, step-by-step instructions for integrating Azure Cloud HSM with widely used platforms and technologies, including:

• Active Directory Certificate Services (AD CS)
• Java Cryptography Extension (JCE)
• OpenSSL
• Oracle Transparent Data Encryption (TDE)
• PKCS#11
• SQL Server Extensible Key Management (EKM)
• Certificate Storage
• Offloading of Secure Sockets Layer (SSL) or Transport Layer Security (TLS) for web servers like Apache, NGINX, and F5 BIG-IP

Each guide includes prerequisites, system requirements, configuration steps, and validation procedures tailored to a specific integration scenario. For example, the guide for SSL/TLS offloading details how to configure Apache, NGINX, and F5 BIG-IP to use Azure Cloud HSM for cryptographic operations, to help ensure secure and efficient SSL/TLS handshakes.

To explore all available integration resources, go to the GitHub repository.

Available integration guides

Here are the integration guides that can help you securely connect applications and systems to Azure Cloud HSM:

• Integrating Active Directory Certificate Services with Azure Cloud HSM (PDF)
• Integrating JCE with Azure Cloud HSM (PDF)
• Integrating OpenSSL with Azure Cloud HSM (PDF)
• Integrating Oracle TDE with Azure Cloud HSM (PDF)
• Integrating PKCS#11 with Azure Cloud HSM (PDF)
• Azure Cloud HSM certificate storage
• PKCS#11 API for certificate storage
• Integrating SQL Server EKM with Azure Cloud HSM (PDF)
• Integrating Apache or NGINX for SSL/TLS Offloading with Azure Cloud HSM (PDF)
• Integrating F5 BIG-IP for SSL/TLS Offloading with Azure Cloud HSM

Related content

• Azure Cloud HSM overview
• Deploy Azure Cloud HSM by using the Azure portal
• Deploy Azure Cloud HSM by using Azure PowerShell
• Azure Cloud HSM onboarding guide