Microsoft says new service eases payment compliance burdens

Microsoft, Marvell and Utimaco are collaborating to deliver Azure Payment HSM v2, a new cloud-scale platform designed to secure payment transactions for financial institutions, the company says. The service combines Marvell’s LiquidSecurity hardware, Utimaco’s Atalla Payments Module, and the Microsoft Azure cloud, offering a compliant and scalable alternative to costly, on-site infrastructure.

“By offering this new solution as a service on Azure, we’re removing the operational burden of managing payment specific HSMs so our customers can focus on innovation,” says Soumya Subramanian, Vice President of Cloud Security Engineering at Microsoft. Azure Payment HSM v2 will initially be available in Western U.S. and Western Europe as a public preview.

Marvell LiquidSecurity HSMs and Utimaco Atalla Enable Cloud Payment Security

The new Azure Payment HSM v2 platform uses Marvell LiquidSecurity hardware security modules designed for dense, multi-tenant environments, delivering high transaction throughput and hardware-based key protection. This focus on scalable infrastructure addresses a critical limitation of traditional payment HSM deployments, which often rely on costly, complex, and difficult-to-scale data center-based infrastructure. Payment networks face increasing pressure to modernize while adhering to evolving regulatory demands, including PCI PIN Security and regional data sovereignty requirements, and this new approach aims to alleviate those burdens.

Utimaco’s Atalla Payments Module forms a core component of the service, providing industry-proven cryptographic software supporting card issuance, PIN translation, and mobile payments. Stefan Auerbach, CEO of Utimaco, stated, “We are proud to position our globally successful Atalla Payments Module in Microsoft’s multi-vendor HSM infrastructure provided by Marvell,” emphasizing the module’s established presence within global payment networks and its unique ability to operate across multiple hardware platforms.

The combination of Utimaco’s software with Marvell’s hardware and Microsoft’s cloud infrastructure represents an industry first, promising enhanced performance and maximum security for customers. Cary Ussery, senior vice president and general manager, Multimarket Business Group, at Marvell, added, “Combining best-in-class hardware, software and services to meet the performance, security and compliance demands of modern payment networks, the new solution will allow customers to scale their security capabilities without the cost and hassle of managing traditional dedicated payment infrastructure.” This collaborative effort aims to provide a cloud-native payment security platform that is not only secure and compliant but also simplifies management and reduces costs for payment providers facing growing transaction volumes and fraud threats.

By offering this new solution as a service on Azure, we’re removing the operational burden of managing payment specific HSMs so our customers can focus on innovation.

Soumya Subramanian, vice president of Cloud Security Engineering at Microsoft
Stay current

See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.

Avatar of Ivy Delaney

Ivy Delaney

Ivy Delaney has been working with neural networks and machine learning since the mid-nineties, back when a couple of hidden layers and a long afternoon of training counted as ambitious. She has watched the field go from academic curiosity to the thing quietly running underneath everything, and she brings that long view to quantum computing. For Quantum Zeitgeist she covers the ground where the two fields meet. That means quantum machine learning and the variational algorithms it leans on, and it also means the less glamorous but more interesting story of classical machine learning already doing real work inside quantum machines, decoding error-correcting codes, calibrating noisy hardware and learning the error models that simulators depend on. She writes about the hardware those algorithms have to run on too, and about the post-quantum cryptography scramble that the same hardware has set off. Her stories typically start with the paper, whether that is peer-reviewed work, conference proceedings or an arXiv preprint, with the source linked so you can hold a claim up against the research it came from. She is unimpressed by benchmarks that will not say what they beat, and by demonstrations that only work in the press release.

Latest Posts by Ivy Delaney: