locked
Azure Key Vault Pricing for HSM protected keys RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,      

    I have seen the pricing page for the MS Key Vault but have a confusion.

    1. Do you charge for each key that is generated in the HSM i.e. 0.50$? Or
    2. Do you only charge for each key that is stored in the HSM directory or with in the Thales DB associated with the HSM?

    If its 1 then it means we will be charged for each user’s key even if we generate it in the HSM and wrapped/export right away. 

    If its 2, then the cost could be much less if one creates the key in the HSM and then wrap and export it and hence Key Vault only charges for the operation and not the actual key.

    Regards,

    Wahaj

    • Edited by WahajK Monday, March 2, 2015 7:16 AM
    Monday, March 2, 2015 7:15 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Wahaj,

    Every HSM-protected key in your key vault is charged $0.50. Only keys that are actual used in the preceding 30 days are charged; there is no charge for idle keys. If the key has multiple versions, each version is charged separately. The FAQ at the bottom of the Azure Key Vault pricing page illustrates with examples how this plays out in various situations.

    I'm not sure what you mean by wrap and export. The Key Vault service does not have an export method.

    Sumedh

    Sunday, March 8, 2015 8:31 AM