Previously the Key Vault service was supported bring your own key (BYOK) with nCipher HSMs. Now Azure customers will be able to to use any supported on-premises HSMs to generate keys and import them into Azure Key Vault. This will help many customers regulatory or compliance requirements to use on-premise HSMs to generate keys.