Azure Payment HSM v2 entered public preview on September 17. At its core is the Utimaco Atalla Payments Module, the software that powers PIN processing, card and mobile issuance, and key management across global payment networks. It runs on cloud-scale HSM hardware within Microsoft Azure, and is delivered as a fully managed service. Here’s what that combination means in practice.
The cloud financial services already trust
Banks, card issuers, and payment processors around the world already run critical workloads on Azure. Microsoft has invested heavily in the security, compliance, and regulatory engagement that financial institutions demand, and that foundation now extends to payment HSMs. For many organizations, the HSM is the last piece of payment infrastructure still tied to the data center. Azure Payment HSM v2 allows it to operate alongside the applications, data, and analytics already running in the same trusted environment.
Global reach, low latency
Payment authorizations are measured in milliseconds. Azure’s global network of regions lets you position cryptographic processing close to your customers, acquirers, and applications. As the service expands beyond its initial regions, entering a new market no longer necessarily means shipping hardware, establishing a data center presence, and waiting months. You can deploy where your business needs to be, with traffic carried over Microsoft’s private global backbone rather than the public internet.
Capacity that follows demand
Holiday peaks, market launches, and mobile wallet rollouts can multiply transaction volumes overnight, and every transaction relies on the HSM to protect PINs and verify cards. With fixed hardware, you have to size capacity for the busiest day of the year and pay for unused capacity the rest of the time. With Azure, the service’s elasticity allows capacity to scale up to meet peak demand and scale back down afterward. Growth becomes a configuration decision rather than a hardware purchase.
Resilience at cloud scale
HSMs are clustered automatically, with keys kept consistent across the cluster, allowing any unit to handle incoming requests. If a component fails, the platform detects the failure and initiates recovery automatically, reducing the need for manual intervention. Backup and restore capabilities are built in, while Azure’s multi-region infrastructure can support disaster recovery arrangements that would be costly and complex to implement independently. When a Payment HSM outage can mean declined transactions, resilience matters.
Compliance by design
The Azure service supports PCI PIN and PCI HSM requirements, alongside Azure’s extensive portfolio of security and compliance certifications relevant to financial services. Keys are generated and used within secure hardware, never exposed in plaintext, and protected by a master key under your control. Sensitive operations remain subject to dual control. Microsoft manages the infrastructure; your organization retains control of its keys.
An interface the industry already uses
The service uses the Utimaco Atalla API, a payment interface with a decades-long track record and support across processing systems, issuer platforms, and personalization tools throughout the ecosystem.
Hybrid on your terms
Moving to the cloud doesn’t require replacing your existing infrastructure. Azure Payment HSM v2 supports industry-standard methods for secure key exchange, enabling interoperability with existing on-premises HSMs from different vendors, subject to compatibility and configuration requirements. If you’re not ready to move your entire payment infrastructure to the cloud at once, you don’t have to. Keep existing workloads where they perform best and launch new programs in Azure: a new issuing platform, a new market, or a new product line. You can expand at a pace that suits your risk and compliance requirements, one workload at a time.
The Concept of a Cloud-Hosted Payment HSM
Cloud-hosted Payment HSMs are attracting growing interest among financial services companies. The concept is not new to Utimaco, which offers a cloud-agnostic, fully managed Payment HSM as a Service solution. Accessible through Utimaco’s global data centers, the service enables payment use cases to run entirely in the cloud.
Customers of Payment HSM as a Service values rapid access to a PCI-compliant environment, high performance powered by the Atalla AT1000 Payment HSM, and fast cloud deployment with the flexibility to scale as business needs evolve. The service also incorporates Utimaco’s PHI capability, which enables significant increases in transaction throughput without increasing per-command latency.
Where to start
The public preview is live now. Start with a non-production workload or a new program without legacy dependencies, test performance against realistic peak transaction volumes, and plan early which keys will need to be migrated and how. Then evaluate what Azure’s scale can deliver for your payment infrastructure. To get started, contact your Azure account team or email eric.tocatlian@utimaco.com.
You can also explore Utimaco’s Payment HSM as a Service with a 30-day free trial to experience its capabilities firsthand.
Your download request(s):
Your download request(s):
About Utimaco's Downloads
Visit our Downloads section and select from resources such as brochures, data sheets, white papers and much more. You can view and save almost all of them directly (by clicking the download button).
For some documents, your e-mail address needs to be verified. The button contains an e-mail icon.
A click on such a button opens an online form which we kindly ask you to fill and submit. You can collect several downloads of this type and receive the links via e-mail by simply submitting one form for all of them. Your current collection is empty.