Marvell, Microsoft and Oracle Form OCP Working Group on Server-Integrated HSMs
DataNews Editorial Team
Marvell Technology, Microsoft and Oracle have formed an Open Compute Project Security Track working group to develop an open specification for a hardware security module integrated directly into servers. The initiative targets cloud and hyperscale data-center platforms, with server-level key caching and lifecycle management as core functions.
- The OCP Security Track working group is developing an open specification for an HSM integrated directly into a server.
- The proposed module is designed for server-level cryptographic key caching and lifecycle management.
- Technical goals include a hardware security boundary, key storage, an attestation chain and NIST FIPS 140-3 Level 3 certification.
- The initiative remains at the working-group and specification-development stage; no product deployment or commercial availability was stated.
Marvell Technology, Microsoft and Oracle announced the new working group within the Open Compute Project’s Security Track. Its mandate is to develop open specifications for an HSM embedded directly in the server, rather than deployed as a network-attached security resource.
The proposed server-integrated HSM is intended to securely cache cryptographic keys and manage their lifecycle at the server level. The design objective is to execute cryptographic operations where data is processed, avoiding the need to transmit keys across the network.
The group has identified a NIST FIPS 140-3 Level 3 certification target, alongside a hardware security boundary, key storage and an attestation chain. These are technical objectives for the initiative, rather than demonstrated operating outcomes.
For cloud and hyperscale operators, the approach could offer an alternative architectural model to network HSM deployments and software-led key management. The initiative is positioned around requirements associated with AI workloads, zero-trust architectures, regulatory compliance and the development of quantum technologies.
An open server HSM specification could potentially broaden the market for hardware security in server platforms and influence procurement requirements for cloud and hyperscale data centers. Its practical impact, however, will depend on completion of the specification, certification, support from server manufacturers and adoption by operators.
The proposed architecture would move cryptographic operations closer to where data is processed, offering an alternative to network-attached HSMs and software-based key management. If completed, certified and adopted by server manufacturers and operators, the specification could help establish a more consistent hardware-rooted approach to key protection in cloud and hyperscale infrastructure.
- Data Centre Magazine / October 20, 2026 · EnglishSource →
This article was prepared by the DataNews editorial team based on the sources listed above.