Microsoft, Marvell, and Utimaco Launch Azure Payment HSM v2 for Cloud-Scale Security

Microsoft, Marvell, and Utimaco have launched Azure Payment HSM v2, a cloud-native security platform designed for financial institutions and payment service providers. This development is critical for fintech professionals as it transitions hardware-backed payment security to a managed service model, removing the operational complexity of physical infrastructure while maintaining strict PCI compliance.

What was announced

The Azure Payment HSM v2 is a highly available security platform delivered through Microsoft Azure. It is designed to allow banks and payment processors to secure critical workloads, protect sensitive assets, and maintain cryptographic key sovereignty. The solution specifically targets the modernization of payment networks that are currently burdened by the costs and limitations of traditional, customer-owned data center infrastructure.

The platform integrates three core technologies: the Utimaco Atalla Payments Module, Marvell LiquidSecurity hardware security module (HSM) technology, and the Microsoft Azure cloud environment. By combining these elements, the service provides a foundation for securing transactions that meets stringent PCI PIN Security, PCI HSM, and regional data sovereignty requirements. It is built for dense, multi-tenant environments, offering high transaction throughput and hardware-based key protection without requiring customers to manage physical hardware.

Functionally, the Atalla software supports card issuance, PIN translation, mobile payments, and key management. This is paired with Marvell’s purpose-built hardware to ensure performance at cloud scale. The service is intended to help financial institutions elastically scale their security capabilities in response to growing transaction volumes and evolving fraud threats. Azure Payment HSM v2 will be available as a public preview starting September 17, 2026, with initial availability in the Western U.S. and Western Europe regions.

"We are proud to position our globally successful Atalla Payments Module in Microsoft’s multi-vendor HSM infrastructure provided by Marvell. This is an industry first and provides excellent performance and maximum security to Microsoft and its payment customers."

Stefan Auerbach, CEO of Utimaco.

The companies involved

Microsoft is a global technology leader with a significant footprint in the financial services sector, providing the enterprise-grade cloud infrastructure for this collaboration. The company has been a central figure in fintech modernization, frequently partnering with major institutions to move legacy systems into the cloud. Soumya Subramanian serves as the vice president of Cloud Security Engineering at Microsoft.

Utimaco is a specialized provider of cybersecurity and compliance solutions. Its Atalla Payments Module is a long-standing name in the industry, recognized for supporting multiple hardware platforms and being widely deployed across global payment networks. Stefan Auerbach leads the company as CEO. Utimaco’s role in this partnership provides the cryptographic software layer necessary for complex payment processing tasks.

Marvell Technology (NASDAQ: MRVL) provides the underlying hardware layer for the platform. Its LiquidSecurity HSMs are designed specifically for cloud-scale applications, focusing on high-performance transaction throughput. Cary Ussery is the senior vice president and general manager, Multimarket Business Group, at Marvell. The company’s hardware is engineered to handle the demands of multi-tenant cloud environments, ensuring that security does not become a bottleneck for high-volume payment processors.

What FF News has reported before

FF News has extensively covered Microsoft’s role in the digital transformation of the banking sector, with 136 stories documenting its influence. Recently, the publication reported on how Nationwide Modernizes Core Banking for 15M Customers with Microsoft AI, highlighting the shift away from legacy systems. Microsoft’s leadership in the region was also noted when Zilch Appoints Former Microsoft EMEA Chief Dame Clare Barclay to Board Amid European Expansion.

Utimaco has also appeared in FF News coverage five times, typically in the context of specialized security and encryption. While Marvell Technology is a newer name in this specific reporting context, the collaboration with established players like Microsoft and Utimaco places their hardware at the center of a major industry shift toward cloud-based security modules.

What this means

This announcement moves the needle by addressing one of the final hurdles for total cloud migration in banking: the physical HSM. For years, the requirement for hardware-backed security forced even "cloud-first" banks to maintain a footprint in physical data centers. By offering a PCI-compliant, hardware-backed HSM as a managed service, Microsoft and its partners are putting significant pressure on traditional on-premise hardware vendors. The industry must now grapple with whether the convenience of a managed service outweighs the absolute control of a physical appliance. This launch raises a critical question for the sector: will regulators in more conservative jurisdictions accept cloud-native HSMs as equivalent to traditional physical security for Tier 1 payment processing?