Azure Key Vault Retires hsmPlatform 1 Keys September 15, 2028
Azure Key Vault is retiring support for hsmPlatform 1 keys on September 15, 2028, as part of ongoing security and performance improvements. Users with affected resources are advised to transition to hsmPlatform 2 keys to maintain security and functionality. Migration involves creating new hsmPlatform 2 keys and rekeying operations, as direct transfer is not supported.
- →Retirement of hsmPlatform 1 Keys
- →Migration Process to hsmPlatform 2 Keys
- →Migrating Protected Documents
Deprecations (1) ›
- Retirement of hsmPlatform 1 Keys
Support for hsmPlatform 1 keys in Azure Key Vault will be retired effective September 15, 2028. This change is part of efforts to enhance security and performance. Resources utilizing hsmPlatform 1 keys will be impacted and require migration.
Notes (2) ›
- Migration Process to hsmPlatform 2 Keys
Keys cannot be directly transferred from hsmPlatform 1 to hsmPlatform 2. The recommended migration process involves creating new keys on hsmPlatform 2 and then rekeying or rolling existing operations to use these new keys. Detailed instructions are available in the provided documentation.
- Migrating Protected Documents
For existing documents or content protected by old tenant keys, users must first remove the protection applied with the hsmPlatform 1 key. Subsequently, protection must be reapplied using the newly created hsmPlatform 2 tenant key. Avoid deleting the old tenant key until it is no longer required for legacy content.
https://azure.microsoft.com/en-us/updates/?id=494676
Related releases
- Azure Storage Mover Now Supports Agentless SMB File Share Migration Azure Updates ·
- Azure Functions Flex Consumption Adds GA Support for TLS/SSL Certificates and End-to-End Encryption Azure Updates ·
- Generally Available: Azure Developer CLI (azd) Extension Framework Azure Updates ·
- Terraform AzureRM Provider v5.2.0 Adds User-Assigned Identity List Resource, Enhancements Terraform AzureRM Provider Releases ·
- Azure Front Door Public Preview of Mutual TLS (Client Certificate Authentication) Azure Updates ·
- Public Preview: Symmetric Key Support in Azure Key Vault Premium Azure Updates ·