Edit

Share via


Tutorial: Remove a commissioned payment HSM

Before deleting a commissioned payment HSM, decommission it first. For information on lifecycle management and deallocation scenarios, see Azure Payment HSM lifecycle management.

In this tutorial, you learn how to:

  • Remove a commissioned payment HSM
  • Verify that the payment HSM is deleted

For information about creating payment HSMs, see Tutorial: Create a payment HSM.

Remove a payment HSM from the payShield manager

Navigate to the payShield manager by following the steps in Access the payShield manager. From there, select Remove device.

Screenshot of the payShield manager for Azure Payment HSM, remove device screen.

Prepare the HSM for release

Before releasing the HSM, complete the following steps:

  1. Remove certificate data: For HSMs running firmware versions earlier than 2.1a (1.15.0), use the SV command on the virtual console to view loaded certificates. Then, use the SD command to delete all certificate data. While residual certificates pose no security risk, remove them as a best practice. For more details, see Known issues: TLS certificates aren't removed during HSM release.

  2. Set HSM to Secure state: The payment HSM must be in a Secure state before the RELEASE button is enabled. To set this state, sign in by using both Left and Right Keys and change the state to Secure.

If you need assistance with these steps, contact Thales Support. For information on firmware versions, see Support guide: Firmware and license support.

Delete the payment HSM

After you release the payment HSM, delete it by using Azure CLI or Azure PowerShell.

Use the az dedicated-hsm delete command to remove your payment HSM. The following example deletes the myPaymentHSM payment HSM from the myResourceGroup resource group:

az dedicated-hsm delete --name "myPaymentHSM" -g "myResourceGroup"

You can verify that the payment HSM was deleted by using the Azure CLI az dedicated-hsm show command.

az dedicated-hsm show --resource-group "myResourceGroup" --name "myPaymentHSM"

This command returns a "resource not found" error.

Next steps