Is there a plan to use HSMs with a valid FIPS certificate that is not historical for HSM protected key vaults?

Sridharan, Sidhartha 10

This Microsoft link shows that the HSM protected key vault uses HSMs with certificates that are historical.

Key Vault service uses a mix of Thales nShield F2 6000+ and Marvell LiquidSecurity HSM cards in the backend for HSM functionality. They are FIPS 140-2 Level 2 or greater validated. The relevant NIST certificates are here (Cryptographic Module Validation Program | CSRC (nist.gov)) and here (Cryptographic Module Validation Program | CSRC (nist.gov)).

Are there plans to use HSMs with a valid FIPS certificate? Are the HSMs going to be tested under 140-3 standards?

Shweta Mathur 30,181 Reputation points Microsoft Employee

2023-05-10T10:50:09.4466667+00:00

Hi @Sridharan, Sidhartha ,

Thanks for reaching out.

I am checking on this with the product team.

Thanks,

Shweta
Shweta Mathur 30,181 Reputation points Microsoft Employee

2023-05-15T10:36:29.4533333+00:00

Hi @Sridharan, Sidhartha ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Marilee Turscak-MSFT 37,046 Reputation points Microsoft Employee

2023-05-19T19:32:14.26+00:00

Hi @Sridharan, Sidhartha ,

Just checking to see if you were able to get the information you needed? If the information from Shweta helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.

Otherwise, let us know if you have further questions.

Thank you for your time and patience throughout this issue!

1 answer

Shweta Mathur 30,181 Reputation points Microsoft Employee

2023-05-12T04:09:55.6166667+00:00

Hi @Sridharan, Sidhartha ,

Thanks for your time and patience.

As per product team, our HSM Vendor has submitted firmware for FIPS 140-3 certification however there are lengthy delays in the NIST certification process that are impacting many vendors and we are presently unable to say with certainty when the firmware will be approved and deployed. The existing firmware is FIPS 140-2 Level 3 certified.

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.
Please sign in to rate this answer.
Harry, Christopher 20 Reputation points

2024-02-01T20:43:40.93+00:00

Is there any update on the level 3 certification process?

Our current implementation requires a certification of FIPS 140 level 3, but I do not see any certificate provided in the Microsoft documentation of Key Vault Managed HSM Thanks.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Is there a plan to use HSMs with a valid FIPS certificate that is not historical for HSM protected key vaults?

1 answer

Your answer