Maintained with ☕️ by
IcePanel logo
Microsoft Azure logo
Original post

Retirement: hsmPlatform 1 Keys in Azure Key Vault

Share

Services

As part of our ongoing commitment to improving security and performance, we will be retiring support for hsmPlatform 1 keys, effective September 15, 2028\. To ensure the continued security and functionality of your operations, we recommend transitioning to hsmPlatform 2 keys as soon as possible. ### How to Identify Affected Resources To determine which resources are impacted: * You can list your keys and check the HSMPlatform value to confirm which ones require migration. For reference, see [Azure Key Vault Key Attributes](https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details#key-attributes). **Required action** Keys cannot be directly transferred from hsmPlatform 1 to hsmPlatform 2\. To migrate: 1\. Create new keys on hsmPlatform 2. 2\. Rekey or roll your operations to utilize the newly created keys. For detailed instructions, please refer to [this documentation](https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads), which outlines the process step by step. **Important Reminder** Avoid deleting the old tenant key until it is no longer needed for content or documents protected under it. If you need to migrate existing documents: 1\. Remove the protection applied with the old tenant key. 2\. Reapply protection using the new tenant key.