Marvell, Microsoft and Oracle have launched an Open Compute Project working group to define an open, server-integrated hardware security module for cloud and hyperscale data centers. The initiative targets a silicon-based, attested design aligned with NIST FIPS 140-3 Level 3, bringing key protection and cryptographic operations closer to the workloads they serve. Marvell announced the collaboration on Oct. 13. [1]
The effort sits within the OCP Security Track and is intended to produce open specifications for a hardware security boundary, key vault and attestation chain embedded directly in a server. The companies said the model would support secure key caching and lifecycle management while allowing relying parties to verify workload integrity cryptographically. The approach is designed to reduce dependence on network-attached HSMs and software-only key management, where keys may have to cross a network or reside temporarily in memory outside a certified security boundary.
Microsoft has also introduced Project Tessera, an open-source evolution of Azure Integrated HSM developed with Marvell, Oracle and the OCP. Microsoft says Tessera will open the architecture, specifications, protocols, drivers, software, firmware and reproducible build environments, with a longer-term goal of enabling a broadly available open implementation. The initiative is intended to maintain FIPS 140-3 Level 3 key protection throughout the key lifecycle rather than treating the HSM as a separate network service. [3]
The project is not a response to a disclosed vulnerability, and the announcement identifies no affected product versions, CVE, CVSS score, public proof of concept or exploitation in the wild. It therefore has no patch for defenders to deploy and no current evidence of threat-actor activity tied to the proposed architecture. Security teams should also distinguish the target certification level from a completed certification: the OCP’s latest summit update says the specification remains under development. [8]
For infrastructure operators, the immediate impact is strategic rather than operational. A standardized integrated HSM could reduce cryptographic latency, simplify multi-tenant key isolation and strengthen remote attestation, but it will also introduce new dependencies among server silicon, firmware, drivers, HSM partitioning and cloud key-management services. Operators evaluating future platforms should seek published security boundaries, certification evidence, secure-boot and attestation details, key-recovery procedures, firmware-update controls and clear responsibility for vulnerability disclosure before treating an integrated design as a compliance substitute.
Marvell, Microsoft and Oracle said an initial technical draft was targeted around the 2026 OCP Global Summit, with a version 1.0 specification to follow. Microsoft and Marvell demonstrated Tessera transfer protocols for HSM partition cloning and resiliency between Tessera and Marvell LiquidSecurity 2 hardware, but the demonstration does not itself establish broad product availability or final interoperability. [3]
References
- Marvell, Microsoft and Oracle Establish OCP Working …
- Open-source Integrated HSM for hardware security
- tessera/cvss-suppressions.xml at master · Consensys-inc-archive/tessera
