Microsoft, Marvell, and Utimaco Launch Azure Payment HSM v2 Preview
Microsoft, in collaboration with Marvell Technology and Utimaco, announced the public preview rollout of Azure Payment HSM v2 on September 17, 2026. The managed service brings together Marvell's LiquidSecurity hardware security module (HSM) architecture, Utimaco's Atalla Payments Module software stack, and Microsoft Azure infrastructure. The service is initially available in Western U.S. and Western Europe regions, targeting financial institutions, payment processors, and fintech platforms requiring cloud-native cryptographic processing for regulated workloads.
Historically, general-purpose cryptography—such as TLS termination, certificate management, and data-at-rest encryption—has transitioned smoothly into managed cloud key vaults. In contrast, transaction-level payment security remained tethered to legacy on-premises datacenters. Payment cryptographic standards mandate dedicated hardware protections for sensitive operations like PIN routing, card personalization, and mobile wallet tokenization under strict PCI PIN Security and PCI HSM standards. Azure Payment HSM v2 addresses this structural barrier by delivering full cryptographic key sovereignty and compliance rigor within a multi-tenant, cloud-scale abstraction layer.
The development highlights a broader architectural trend across cloud computing: the elimination of specialized on-premises hardware silos in favor of hyperscale-native co-processors and specialized cryptographic fabrics. Hyperscalers have spent recent years standardizing general key management (such as Azure Dedicated HSM and Key Vault Managed HSM), but payment networks required domain-specific firmware and backwards compatibility with existing banking APIs. Porting the proven Utimaco Atalla engine onto high-density Marvell LiquidSecurity adapters inside Azure allows enterprises to preserve core payments logic without refactoring existing transaction orchestration.
For cloud architects and DevOps engineers in the financial services domain, Azure Payment HSM v2 simplifies elastic scaling and cross-region disaster recovery for payment flows. Instead of provisioning physical rack-mounted HSM appliances and managing complex physical key ceremonies in colocation facilities, teams can provision and manage payment HSM capacity through standard cloud workflows. Engineering teams should evaluate latency profiles and test compliance isolation in the preview regions, paying particular attention to network peering topology between legacy payment switches and Azure virtual networks to ensure transaction throughput SLAs are maintained.
Read original source