{
  "slug": "azure-key-vault-hsmplatform-1-keys-retirement",
  "title": "Azure Key Vault: support for hsmPlatform 1 keys retirement",
  "summary": "Retirement date for support of hsmPlatform 1 keys in Azure Key Vault: 15 Sep 2028. Microsoft recommends moving to hsmPlatform 2 keys.",
  "cloud": "azure",
  "service": "Azure Key Vault",
  "service_slug": "key-vault",
  "category": "feature",
  "type": "retirement",
  "announced_date": "2025-09-15",
  "effective_date": "2028-09-15",
  "effective_precision": "day",
  "impact": "Support for hsmPlatform 1 keys in Azure Key Vault is retired on 15 Sep 2028. Affected keys can be found by listing keys and checking the HSMPlatform value. Keys cannot be transferred directly from hsmPlatform 1 to hsmPlatform 2.",
  "migration_path": "1. List your keys and check the HSMPlatform value to find the keys that need migration. See [Azure Key Vault Key Attributes](https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details#key-attributes).\n2. Create new keys on hsmPlatform 2.\n3. Rekey or roll your operations to use the new keys, following the [migration documentation](https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads).\n4. Do not delete the old tenant key until it is no longer needed for content or documents protected under it.\n5. To migrate existing documents, remove the protection applied with the old tenant key and reapply protection using the new tenant key.",
  "replacement": "hsmPlatform 2 keys",
  "affected_versions": [
    "hsmPlatform 1"
  ],
  "source_url": "https://azure.microsoft.com/updates?id=494676",
  "extra_source_urls": [
    "https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details#key-attributes",
    "https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads"
  ],
  "vendor_ref": "494676",
  "last_checked_at": "2026-11-12T09:55:19.345Z",
  "created_at": "2026-11-13T13:36:44.208Z",
  "updated_at": "2026-11-13T13:36:44.208Z",
  "url": "https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement",
  "short_url": "https://eolwatch.dev/i/ag",
  "markdown_url": "https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement.md",
  "json_url": "https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement.json",
  "estate_check": null,
  "source_note": null
}