Bring your own key (BYOK) is an innovative concept that was initially pioneered by Entrust and Microsoft to enable public cloud users to maintain control of the cryptographic keys used in the cloud to keep their data secured. As the adoption of public cloud services exploded, BYOK is now supported across all major cloud services. BYOK enables public cloud users to generate their own high quality master key locally on-premises, and securely transfer the key to their cloud service provider (CSP) to protect their data across multi-cloud deployments. Cloud HSM does not require an on premises HSM footprint. Cryptographic services are provisioned in the cloud while the owner retains full control of those services. Having your crypto services commissioned in the cloud gives you the maximum freedom and flexibility.