Gemalto’s HSM Provides Full Control of Encryption Keys to Customers

Microsoft Azure Information Protection customers can now take advantage of the new “Hold Your Own Key” (HYOK) functionality using Gemalto’s SafeNet Luna Hardware Security Modules (HSMs). The integration allows organizations in highly regulated scenarios to manage, own and store their encryption keys in on-premises HSMs and securely share data with complete control over their keys. With this solution, enterprises can easily align data protection policies and business processes without compromising the integrity and security of their data.

The SafeNet Luna HSM enables HYOK functionality via native support for Microsoft’s Active Directory Rights Management Services (AD RMS). Companies have the option to use AD RMS protection policies for ‘top-secret’ data and Azure RMS protection policies for sensitive data. Enterprises can use the Azure Information Protection to enable secure internal and external collaboration. The SafeNet Luna HSM integration with the Azure Information Protection’s HYOK feature requires no change to the user experience or deployments. Customers control access to sensitive data by defining protection policies and use rights. All of the other information protection features, like document tracking and revocation, are preserved.

“Organizations using Microsoft Azure Information Protection services now have access to the convenient security features they’re used to, without having to hand over ownership and control of their encryption keys to their cloud provider,” said Todd Moore, SVP of Encryption Products at Gemalto. “Combining the SafeNet Luna HSM with the Azure Information Protection’s HYOK functionality, customers can continue to deploy customized data protection controls without compromising security or operational transparency of a user’s applications.”