---
slug: "azure-key-vault-hsmplatform-1-keys-retirement"
title: "Azure Key Vault: support for hsmPlatform 1 keys retirement"
summary: "Retirement date for support of hsmPlatform 1 keys in Azure Key Vault: 15 Sep 2028. Microsoft recommends moving to hsmPlatform 2 keys."
cloud: "azure"
service: "Azure Key Vault"
service_slug: "key-vault"
category: "feature"
type: "retirement"
announced_date: "2025-09-15"
effective_date: "2028-09-15"
effective_precision: "day"
replacement: "hsmPlatform 2 keys"
affected_versions: ["hsmPlatform 1"]
source_url: "https://azure.microsoft.com/updates?id=494676"
extra_source_urls: ["https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details#key-attributes","https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads"]
vendor_ref: "494676"
last_checked_at: "2026-11-12T09:55:19.345Z"
created_at: "2026-11-13T13:36:44.208Z"
updated_at: "2026-11-13T13:36:44.208Z"
url: "https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement"
short_url: "https://eolwatch.dev/i/ag"
markdown_url: "https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement.md"
json_url: "https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement.json"
---

# Azure Key Vault: support for hsmPlatform 1 keys retirement

Retirement date for support of hsmPlatform 1 keys in Azure Key Vault: 15 Sep 2028. Microsoft recommends moving to hsmPlatform 2 keys.

- Effective date: 15 Sep 2028
- Cloud: [Azure](https://eolwatch.dev/cloud/azure.md)
- Service: [Azure Key Vault](https://eolwatch.dev/services/azure/key-vault.md)
- Type: Retirement
- Category: [Feature](https://eolwatch.dev/categories/features.md)
- Affected versions: hsmPlatform 1
- Replacement: hsmPlatform 2 keys
- Announced: 15 Sep 2025
- Official source: [azure.microsoft.com](https://azure.microsoft.com/updates?id=494676)
- Last checked: 12 Nov 2026

## What breaks

Support for hsmPlatform 1 keys in Azure Key Vault is retired on 15 Sep 2028. Affected keys can be found by listing keys and checking the HSMPlatform value. Keys cannot be transferred directly from hsmPlatform 1 to hsmPlatform 2.

## Who is affected

### Affected versions

- `hsmPlatform 1`

## What to do

1. List your keys and check the HSMPlatform value to find the keys that need migration. See [Azure Key Vault Key Attributes](https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details#key-attributes).
2. Create new keys on hsmPlatform 2.
3. Rekey or roll your operations to use the new keys, following the [migration documentation](https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads).
4. Do not delete the old tenant key until it is no longer needed for content or documents protected under it.
5. To migrate existing documents, remove the protection applied with the old tenant key and reapply protection using the new tenant key.

## Replacement

hsmPlatform 2 keys

## Sources

- [Official source](https://azure.microsoft.com/updates?id=494676) (azure.microsoft.com, Official)
- [Additional source](https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details#key-attributes) (learn.microsoft.com, Official)
- [Additional source](https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads) (learn.microsoft.com, Official)

Last checked against the first source in this list on 12 Nov 2026.

Page: https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement | JSON: https://eolwatch.dev/items/azure-key-vault-hsmplatform-1-keys-retirement.json

The text on this page is drafted with AI assistance from the vendor's text, checked against the official source and approved by a person before it is published.