What options are there for HSM on Azure Stack HCI?

Question

Can i use managed HSM on Azure Stack HCI?
Could it be a third party HSM?

Thanks!

Answer 1

Hi,

Thank you for posting the question to the Q&A forum.

Yes you can use HSM managed on Azure Stack HCI below you can see all of the informations here: https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/overview

But also you can use 3rd party HSM, so far just 4 options: CloudFlare, PrimeKey, New Net and Hashicorp Vault you can find more here: https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/third-party-solutions

I hope the above information can help you.

If the ANSWER is helpful, please click "Accept Answer" and upvote it. Thanks

Answer 2

Sorry for the misunderstanding @Jaime Rodriguez let's do on this way :

Can I use managed HSM on Azure Stack HCI?

Yes, you can use the below is the reference link from MS: https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/overview

Could it be a third-party HSM?

Yes it can, reference link from MS: https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/third-party-solutions

I hope the above information can help you if not please let me know.

If the ANSWER is helpful, please click "Accept Answer" and upvote it. Thanks

Answer 3

The Azure Stack solutions supports Azure Key Vault Standard Tier, which does not support HSM keys.
https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-key-vault-intro?view=azs-2206#key-vault-basics
https://learn.microsoft.com/en-us/azure/security/fundamentals/key-management#azure-key-management-services

You can install extensions in your Azure Stack solutions, that support communication with any Azure Key Vault service hosted in Microsoft Cloud.