Prerequisites

Make sure to adhere to the prerequisites before continuing with integrating Securosys Primus HSM or CloudHSM with Azure EKM.

On the Microsoft Azure side, you need:

• Existing Azure subscription
• Create or use an existing Managed HSM Resource
  • Requires Azure role permissions "Managed HSM Crypto User" and "Managed HSM EKM Administrator"
• Setup or use existing Managed HSM logging
• Create or use an existing Azure Storage Account
  • Requires Azure Managed HSM role permissions "Managed HSM Crypto User" and "Managed HSM EKM Administrator"

On the Securosys HSM side, you need:

• Existing Securosys Support Portal account
• Fully initialized and configured Primus HSM or a CloudHSM
• Optionally: existing RSA or AES key(s) on the HSM Partition

For customer managed infrastructure, you need:

• Infrastructure to deploy the Securosys EKM Proxy Docker container
  • This can be a VM with Docker installed or a Kubernetes cluster, either on-premise or on Azure.
• Domain name and publicly signed CA certificate for that domain.