DKE Anchor
Two-tier security for the most sensitive data in Azure

Double Key Encryption

Double key encryption solution with Microsoft Purview

  • Key generation and storage inside a tamper-proof HSM
  • Data is encrypted with two keys – one stored in Azure, one in the HSM
  • Extra layer of security for cloud-stored data


Product Type:


Supported Platforms:

Delivery Time:

Ask our sales team
Key Benefits

Key Benefits


Key Life Cycle Management

Securely generate and store encryption keys with Utimaco HSMs that are FIPS 140-2 Level 3 validated, Common Criteria (CC) certified and VS-NfD approved.


Meet Compliance Standard

Meet the compliance requirements for regulations like GDPR, HIPAA, FISMA, and PCI DSS while securely protecting the keys.


Flexible Deployment

Double Key Encryption enables customers to deploy the double key encryption either on-premises or in the cloud.



Sensitive data protection and controlling in Azure Cloud with Double Key Encryption

Achieve two-tier security for the most sensitive data in Azure Cloud and used in Microsoft 365. Our Double Key Encryption solution in collaboration with Microsoft Purview (formerly Microsoft 365 Compliance), complying with the regulations such as GDPR, FISMA, and eIDAS.

Double Key Encryption is ideal for:

  • Protecting sensitive data on Azure cloud
  • Meeting various, industry-specific compliance mandates

Security and key control with Double Key Encryption

Double Key Encryption (DKE) works on the principle of using two keys for protecting sensitive data in the cloud. One key is stored inside the tamper-proof Hardware Security Module, while another key is hosted in Azure. Should this key be compromised that is outside of customer’s control, the data re-mains secure. Without access to both keys, the relevant data remains secure-ly encrypted.

Technical Specifications

Supported Cryptographic Interfaces (APIs)

  • PKCS #11

Fulfills various security compliance mandates

  • FIPS 140-2 Level 3
  • Common Criteria (CC)
  • VS-NfD
  • GDPR


Our on-premise options allow hosting the product directly on-site in your own network or data center.

LAN Appliance

As a Service

Hosted within our General Purpose HSM as a Service.

Contact us

We look forward to answering your questions.

How can we help you?

Talk to one of our specialists and find out how Utimaco can support you today.
You have selected two different types of downloads, so you need to submit different forms which you can select via the two tabs.

Your download request(s):

    By submitting below form you will receive links for your selected downloads.

    Your download request(s):

      For this type of documents, your e-mail address needs to be verified. You will receive the links for your selected downloads via e-mail after submitting below form.

      About Utimaco's Downloads

      Visit our Downloads section and select from resources such as brochures, data sheets, white papers and much more. You can view and save almost all of them directly (by clicking the download button).

      For some documents, your e-mail address needs to be verified. The button contains an e-mail icon.

      Download via e-mail


      A click on such a button opens an online form which we kindly ask you to fill and submit. You can collect several downloads of this type and receive the links via e-mail by simply submitting one form for all of them. Your current collection is empty.