# Marvell, Microsoft and Oracle Develop Server HSM Standard

Marvell, Microsoft, and Oracle have formed an Open Compute Project (OCP) working group to develop an open specification for server-integrated hardware security modules (HSMs). The specification targets secure key management, workload attestation, and FIPS 140-3 Level 3 compliance, with version 1.0 expected after the OCP Summit. The announcement identifies no government solicitation, contract value, or award, but the work could inform future government server and infrastructure requirements. Contractors and infrastructure providers can engage through the OCP Security Track.

- Government buyers and contractors can assess whether server-integrated HSM capabilities align with their key-management, workload-attestation, and FIPS 140-3 Level 3 needs.
- Infrastructure providers may engage with the specification effort through the OCP Security Track, where technical input could help shape the shared baseline.
- The announcement describes a standards-development effort, not a funded procurement opportunity; it provides no solicitation or award details.

**Jurisdictions:** international
**Industries:** Information Technology
**Topics:** Cybersecurity, Digital Infrastructure
**Published:** October 20, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)

### Vendors
- Marvell (Founding member leading technical definition of the integrated HSM specification)
- Microsoft (Founding member contributing to interoperability and post-quantum cryptography readiness)
- Oracle (Founding member contributing to the shared technical baseline)

### Sources
- [Marvell, Microsoft & Oracle: Why Servers Need Built-In HSMs | Data Centre Magazine](https://datacentremagazine.com/news/marvell-microsoft-oracle-why-servers-need-built-in-hsms) - Data Centre Magazine