Synchronize keys automatically from payment HSMs to AWS Payment Cryptography
Industries Blog
This article details how companies can synchronize keys from existing payment HSMs to AWS Payment Cryptography, a cloud-native service for managing payment cryptographic operations.
- AWS Payment Cryptography helps companies migrate payment workloads to the cloud by offering:
- Lowered total cost of ownership
- API-based operations instead of complex socket commands
- Faster time to market
- Built-in compliance with PCI standards
The article provides detailed guidance for key synchronization using three electronic key exchange protocols:
- TR34: Asymmetric key exchange for Key Encryption Keys
- TR31: Symmetric key exchange for working keys
- ECDH: Key derivation method for symmetric keys
Comprehensive migration scripts are provided for HSMs from Thales, Futurex, and Atalla, enabling secure and compliant key transfers to AWS Payment Cryptography.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
2025
2026
2024
2026
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.