ReleaseBytes
azure Azure Updates ·

Azure Key Vault Retires hsmPlatform 1 Keys September 15, 2028

securityazuredeprecationengineerazure-key-vault
deprecation

Azure Key Vault is retiring support for hsmPlatform 1 keys on September 15, 2028, as part of ongoing security and performance improvements. Users with affected resources are advised to transition to hsmPlatform 2 keys to maintain security and functionality. Migration involves creating new hsmPlatform 2 keys and rekeying operations, as direct transfer is not supported.

  • →Retirement of hsmPlatform 1 Keys
  • →Migration Process to hsmPlatform 2 Keys
  • →Migrating Protected Documents
Deprecations (1) ›
  • Retirement of hsmPlatform 1 Keys

    Support for hsmPlatform 1 keys in Azure Key Vault will be retired effective September 15, 2028. This change is part of efforts to enhance security and performance. Resources utilizing hsmPlatform 1 keys will be impacted and require migration.

Notes (2) ›
  • Migration Process to hsmPlatform 2 Keys

    Keys cannot be directly transferred from hsmPlatform 1 to hsmPlatform 2. The recommended migration process involves creating new keys on hsmPlatform 2 and then rekeying or rolling existing operations to use these new keys. Detailed instructions are available in the provided documentation.

  • Migrating Protected Documents

    For existing documents or content protected by old tenant keys, users must first remove the protection applied with the hsmPlatform 1 key. Subsequently, protection must be reapplied using the newly created hsmPlatform 2 tenant key. Avoid deleting the old tenant key until it is no longer required for legacy content.

Read the original announcement →

https://azure.microsoft.com/en-us/updates/?id=494676

Related releases