Skip to content

Commit 43fe34f

Browse files
authored
Update about-keys.md
1 parent 0b76c01 commit 43fe34f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/key-vault/keys/about-keys.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ Cryptographic keys in Key Vault are represented as JSON Web Key [JWK] objects. T
3838

3939
The base JWK/JWA specifications are also extended to enable key types unique to the Azure Key Vault and Managed HSM implementations.
4040

41-
HSM-protected keys (also referred to as HSM-keys) are processed in an HSM (Hardware Security Module) and always remain HSM protection boundary.
41+
HSM Keys in vaults are protected". The Software keys are not protected by HSMs.
4242

4343
- Keys stored in vaults benefit from robust protection using **FIPS 140-2 HSMs**. There are two distinct HSM platforms available: 1 which protects key versions with**FIPS 140-2 Level 2** and 2 which protects keys with **FIPS 140-2 Level 3** HSMs depending on when the key was created. To determine which HSM Platform is protecting a key version, get it's [hsmPlatform](about-keys-details.md#key-attributes).
4444
- Managed HSM uses **FIPS 140-2 Level 3** validated HSM modules to protect your keys. Each HSM pool is an isolated single-tenant instance with its own [security domain](../managed-hsm/security-domain.md) providing complete cryptographic isolation from all other HSMs sharing the same hardware infrastructure.
@@ -72,7 +72,7 @@ Key Vault supports RSA and EC keys. Managed HSM supports RSA, EC, and symmetric
7272

7373
|Key type and destination|Compliance|
7474
|---|---|
75-
|Software-protected keys in vaults (Premium & Standard SKUs) | FIPS 140-2 Level 1|
75+
|Software-protected (hsmPlatform 0) keys in vaults | FIPS 140-2 Level 1|
7676
|hsmPlatform 1 protected keys in vaults (Premium SKU)| FIPS 140-2 Level 2|
7777
|hsmPlatform 2 protected keys in vaults (Premium SKU)| FIPS 140-2 Level 3|
7878
|Keys in Managed HSM are always HSM protected|FIPS 140-2 Level 3|

0 commit comments

Comments
 (0)