Microsoft has introduced a new hardware security module designed to boost cloud security by enabling cryptographic key protection directly within server environments.

Azure Integrated HSM addresses latency and scalability challenges often associated with traditional network-attached HSMs while adhering to FIPS 140-3 Level 3 security requirements.

The new hardware module provides locally attached cryptographic services for encryption, decryption, signing, and verification. Keys remain isolated from software, including guest and host systems, ensuring strong physical and logical tamper protection. Unlike traditional HSMs, which introduce network latency or require key release to local environments, Azure Integrated HSM securely retains keys within the module for continuous in-use protection.

"As part of our systems approach in optimizing every layer in our infrastructure, security is a key priority, and we are designing our infrastructure hardware with multiple layers of defense with dedicated innovations to ensure robust protection for Microsoft and for our customers," noted Mark Russinovich, Microsoft’s CTO for Azure.