0

I'm currently in the process of purchasing an EV certificate that I plan on using to sign the build output from an Azure DevOps pipeline.

Based on this article I understand that I need to make sure that I purchase an HSM enabled certificate. When selecting HSM, the provider of choice is asking which platform the cert is going to be used on.

enter image description here enter image description here enter image description here

I could not find out which one Azure DevOps is using.

Norbert Hüthmayr
  • 396
  • 3
  • 14

1 Answers1

1

Rather than Azure DevOps, as you'll be keeping the certificate in Azure Key Vault, that is where the HSM configuration is done. Azure Key Vault has a number of FIPS 140-2 Level 2 compliant HSMs available, you can find them documented here.

Both nShield and Luna are supported HSMs on Azure Key Vault which I can see listed in the list you have posted.

nCipher who are the vendor for nSheild HSMs supports both nCipher BYOK and native BYOK.

Martyn C
  • 1,109
  • 9
  • 18