Is there a plan to use HSMs with a valid FIPS certificate that is not historical for HSM protected key vaults?

Question

This Microsoft link shows that the HSM protected key vault uses HSMs with certificates that are historical.

Key Vault service uses a mix of Thales nShield F2 6000+ and Marvell LiquidSecurity HSM cards in the backend for HSM functionality. They are FIPS 140-2 Level 2 or greater validated. The relevant NIST certificates are here (Cryptographic Module Validation Program | CSRC (nist.gov)) and here (Cryptographic Module Validation Program | CSRC (nist.gov)).

Are there plans to use HSMs with a valid FIPS certificate? Are the HSMs going to be tested under 140-3 standards?

Answer 1

Hi @Sridharan, Sidhartha ,

Thanks for your time and patience.

As per product team, our HSM Vendor has submitted firmware for FIPS 140-3 certification however there are lengthy delays in the NIST certification process that are impacting many vendors and we are presently unable to say with certainty when the firmware will be approved and deployed. The existing firmware is FIPS 140-2 Level 3 certified.

Hope this will help.

Thanks,

Shweta

---

Please remember to "Accept Answer" if answer helped you.