Edit

Share via

Getting started with Azure Payment HSM

  • Article

This article provides steps and information necessary to get started with Azure Payment HSM.

  1. First, engage with your Microsoft account manager and get your business cases approved by Azure Payment HSM Product Manager. See Getting started with Azure Payment HSM. Ask your Microsoft account manager and Cloud Service Architect (CSA) to fill out the Payment HSM: initial contact form.
  2. The Azure Payment HSM comes with payShield Manager license so you can remotely manage the HSM; you must have Thales smart cards and card readers for payShield Manager before onboarding Azure payment HSM. The minimum requirement is one compatible USB Smartcard reader with at least 5 payShield Manager Smartcards. Contact your Thales sales representative for the purchase or using existing compatible smart cards and readers. For more information, see the Payment HSM support: Prerequisites.
  3. Fill out the Payment HSM: Thales support account request form to provide your contact information to the Microsoft account team and the Azure Payment HSM Product Manager, so they can set up your Thales support account. After your Thales Customer ID is created, so you can submit payShield 10K support issues and download documentation, software, and firmware from Thales portal. The customer team can use the Thales Customer ID to create individual account access to Thales support portal.
  4. You must next engage with the Microsoft CSAs to plan your deployment, and to understand the networking requirements and constraints/workarounds before onboarding the service. For details, see:
  5. Contact Microsoft support to get your subscription approved and receive feature registration, to access the Azure payment HSM service. See Register the Azure Payment HSM resource providers. There is no charge at this step.
  6. To create payment HSMs, follow the Tutorials and How-To Guides. Customer billing starts when the HSM resource is created.
  7. Upgrade the payShield 10K firmware to their desired version.
  8. Review the support process and scope here for Microsoft support and Thales's support: Azure Payment HSM Service support guide .
  9. Monitor your payShield 10K using standard SNMP V3 tools. payShield Monitor is another product available to provide continuous monitoring of HSMs. Contact Thales Sales rep for licensing information.

Next steps