If not, does anybody offer FIPS 140-2 HSMs with PKCS#11 on the Azure marketplace?
1 Answers
It looks like the Key Vault service does not support PKCS#11 - it's mostly, well, keys and secrets vault (secure store). However, the Azure dedicated HSM provides physical, dedicated, cryptographic key storage and services. They use SafeNet Luna Network HSM 7 (Model A790) appliance from Gemalto - FIPS 140-2 Level 3-validated devices, which also has an accessible PKCS#11 interface.
Related