{"id":7596,"date":"2022-11-01T00:00:00","date_gmt":"2022-11-01T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/secure-your-digital-payment-system-in-the-cloud-with-azure-payment-hsm-now-generally-available"},"modified":"2025-06-11T00:35:19","modified_gmt":"2025-06-11T07:35:19","slug":"secure-your-digital-payment-system-in-the-cloud-with-azure-payment-hsm-now-generally-available","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/secure-your-digital-payment-system-in-the-cloud-with-azure-payment-hsm-now-generally-available\/","title":{"rendered":"Secure your digital payment system in the cloud with Azure Payment HSM\u2014now generally available"},"content":{"rendered":"\n

We are very excited to announce the general availability of Azure Payment HSM<\/a>, a BareMetal Infrastructure as a service (IaaS) that enables customers to have native access to payment HSM in the Azure cloud. With Azure Payment HSM, customers can seamlessly migrate PCI workloads to Azure and meet the most stringent security, audit compliance, low latency, and high-performance requirements needed by the Payment Card Industry (PCI).<\/p>\n\n\n\n

Azure Payment HSM service empowers service providers and financial institutions to accelerate their payment system\u2019s digital transformation strategy and adopt the public cloud.<\/p>\n\n\n\n

\n
\n
\n
\n

\u201cPayment HSM support in the public cloud is one of the most significant hurdles to overcome in moving payment systems to the public cloud.  While there are many different solutions, none can meet the stringent requirements required for a payment system. Microsoft, working with Thales, stepped up to provide a payment HSM solution that could meet the modernization ambitions of ACI Worldwide\u2019s technology platform. It has been a pleasure working with both teams to bring this solution to reality.”<\/em><\/p>\n\n\n\n

\u2014Timothy White, Chief Architect, Retail Payments and Cloud<\/em><\/p>\n<\/blockquote>\n<\/div>\n\n\n\n

\"logo,<\/figure>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

Service overview<\/h2>\n\n\n\n

Azure Payment HSM solution is delivered using Thales payShield 10K Payment HSM<\/a>, which offers single-tenant HSMs and full remote management capabilities. The service is designed to enable total customer control with strict role and data separation between Microsoft and the customer. HSMs are provisioned and connected directly to the customer\u2019s virtual network, and the HSMs are under the customer\u2019s sole administration control. Once allocated, Microsoft\u2019s administrative access is limited to \u201cOperator\u201d mode and full responsibility for configuration and maintenance of the HSM and software falls upon the customer. When the HSM is no longer required and the device is returned to Microsoft, customer data is erased to ensure  privacy and security. The solution comes with Thales payShield premium package license and enhanced support Plan, with a direct relationship between the customer and Thales.<\/p>\n\n\n\n

\"HSM<\/figure>\n\n\n\n

Figure 1:<\/strong> After HSM is provisioned, HSM device is connected directly to a customer\u2019s virtual network with full remote HSM management capabilities through Thales payShield Manager and TMD.<\/em><\/p>\n\n\n\n

The customer can quickly add more HSM capacity on demand and subscribe to the highest performance level (up to 2500 CPS) for mission-critical payment applications with low latency. The customer can upgrade, or downgrade HSM performance level based on business needs without interruption of HSM production usage. HSMs can be easily provisioned as a pair of devices and configured for high availability.<\/p>\n\n\n\n

Azure remains committed to helping customers achieve compliance with the Payment Card Industry\u2019s leading compliance certifications. Azure Payment HSM is certified across stringent security and compliance requirements established by the PCI Security Standards Council (PCI SSC) including PCI DSS, PCI 3DS, and PCI PIN. Thales payShield 10K HSMs are certified to FIPS 140-2 Level 3 and PCI HSM v3. Azure Payment HSM customers can significantly reduce their compliance time, efforts, and cost by leveraging the shared responsibility matrix from Azure\u2019s PCI Attestation of Compliance (AOC).<\/p>\n\n\n\n

Typical use cases<\/h2>\n\n\n\n

Financial institutions and service providers in the payment ecosystem including issuers, service providers, acquirers, processors, and payment networks will benefit from Azure Payment HSM. Azure Payment HSM enables a wide range of use cases, such as payment processing, which allows card and mobile payment authorization and 3D-Secure authentication; payment credential issuing for cards, wearables, and connected devices; securing keys and authentication data and sensitive data protection for point-to-point encryption, security tokenization, and EMV payment tokenization.<\/p>\n\n\n\n

Get started<\/h2>\n\n\n\n

Azure Payment HSM is available at launch in the following regions: East US, West US, South Central US, Central US, North Europe, and West Europe<\/p>\n\n\n\n

As Azure Payment HSM is a specialized service, customers should ask their Microsoft account manager and CSA to send the request via email<\/a>.<\/p>\n\n\n\n

Learn more about Azure Payment HSM<\/h2>\n\n\n\n