← All platforms
AAzure Key Vault
Microsoft’s answer, and the one that blurs keys, secrets and certificates into a single service.
Cloud KMSKeys, secrets, certificatesBy MicrosoftSince 2015
- Type
- Cloud KMS
- How it works
- One service holding three different things: cryptographic keys, arbitrary secrets and TLS certificates. Standard is software-protected, Premium is HSM-backed, and Managed HSM gives a single-tenant pool. Certificate lifecycle is included, which the other clouds keep separate.
- Scope
- Keys, secrets, certificates
- Deployment
- SaaS (Azure)
- Hardware / key custody
- Premium tier: FIPS 140-2 Level 2/3 HSMs; Managed HSM available
- Pricing*
- Metered per operation; Premium adds HSM · pricing page
- Free tier
- No
- Licence
- —
- Best for
- Microsoft-centric estates
- Notable
- Keys, secrets and certificates in one place
* Published list pricing at August 2026 (vendor pricing pages, August 2026), not a quote.
Strengths
- Covers three jobs other clouds split apart
- Deep Entra ID and Azure integration
- Managed HSM for single-tenant requirements
- Certificate renewal built in
Trade-offs
- No free tier
- Pricing spread across several meters
- Standard tier is software-protected only
- Azure-shaped
Visit Azure Key Vault → Documentation
Listed for comparison as of August 2026 — not an endorsement, and Azure Key Vault did not pay for placement. See disclosure.
Compare Azure Key Vault with…