Microsoft Azure Update
Views
32
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
Azure Application Gateway now supports generally available keyless TLS termination with Azure Key Vault Managed HSM, keeping private keys inside the HSM during TLS handshakes.
Update Details
Security
- Private keys remain inside Azure Key Vault Managed HSM and are never exported to Application Gateway.
- TLS handshake signatures are performed within the HSM, supporting private key custody, separation of duties, and centralized key management.
- Managed identities and role-based access control can govern access to signing keys.
- Managed HSM diagnostic logs provide monitoring of cryptographic signing operations.
- The integration provides cryptographic evidence that TLS keys were generated and stored in a FIPS 140-3 Level 3 validated HSM.
New Features
- Generally available keyless TLS termination for Azure Application Gateway using certificates whose private keys are stored in Azure Key Vault Managed HSM.
Hints
- Configure managed identities and role-based access control for key access.
- Use Azure Key Vault Managed HSM diagnostic logs to monitor signing operations.
Product Information
Vendor: Microsoft
Product: Azure
Product type: Other
Platform: Web
Vendor information published: Oct 22, 2026
Original release notes: View on vendor site
Published on updatealert.io: Oct 22, 2026