![\"Migrar](\"https:\/\/iqcol.com\/wp-content\/uploads\/2025\/09\/Image_fx-2025-09-05T140151.869-1024x559.png\" "\\"\\"")
<\/p>\n
1. Master key (LMK) of the HSM: Who's in control?<\/span><\/h2>\nThe HSM (Hardware Security Module)<\/strong> it is the heart of the crypto payments. The Local Master Key (LMK)<\/strong> determines who controls the encryption keys for transport and storage of sensitive data.<\/p>\n\n- \n
If defined by the cloud provider, your organization loses direct control.<\/p>\n<\/li>\n
- \n
If you enter your company, you keep sovereignty and security on the root key.<\/p>\n<\/li>\n<\/ul>\n
Recommendation:<\/strong> evaluates models of shared responsibility and requires clarity in contract with your provider.<\/p>\n2. Integration with the Host: technical challenges<\/span><\/h2>\nThe interfaces in the cloud are not always identical<\/strong> an HSM on-premises. This may involve adjustments in the integration code or in the processes of authentication.<\/p>\n\n- \n
Impact on legacy systems.<\/p>\n<\/li>\n
- \n
Possible changes in communication protocols.<\/p>\n<\/li>\n
- \n
Development and testing costs additional.<\/p>\n<\/li>\n<\/ul>\n
Tip expert:<\/strong> involve your development team from the beginning of the project.<\/p>\n3. Ceremony of the Keys in the cloud<\/span><\/h2>\nThe ceremony of the keys<\/strong> ensures safety by dual control<\/strong> and split knowledge<\/strong>. In cloud environments should be to redesign the procedure:<\/p>\n\n- \n
Define how to engage the parties in remote.<\/p>\n<\/li>\n
- \n
Record the traceability of the ceremony.<\/p>\n<\/li>\n
- \n
To comply with the guidelines of the PCI PIN.<\/p>\n<\/li>\n<\/ul>\n
4. Compliance with PCI PIN: the decisive factor<\/span><\/h2>\nMigrate without considering the regulatory compliance can result in rework, sanctions and loss of confidence. Have a QPA (Qualified PIN Assessor)<\/strong> ensures that migration to comply with PCI PIN<\/strong>avoiding deviations.<\/p>\nThe migration cryptographic to the cloud is viable and strategic, but it must be done with a solid plan. To define key control, review, technical integration, to design ceremonies safe and supported in a QPA are essential steps.<\/p>\n
Are you evaluating to migrate your payments infrastructure to the cloud?<\/strong> In IQ Information Quality we guide you through the process with 17 years of experience in PCI DSS and PCI PIN. \ud83d\udc49 Contact us.<\/a><\/em><\/p>\nSources consulted<\/h6>\n\n- \n
PCI Security Standards Council \u2013 PCI PIN Security Requirements<\/a><\/h6>\n<\/li>\n- \n
NIST \u2013 Key Management Guidelines,\u00a0<\/a>Thales Group \u2013 Cloud HSM, <\/a>AWS CloudHSM<\/a><\/h6>\n<\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"Migrar infraestructura criptogr\u00e1fica a la nube,\u00a04 puntos clave antes de dar el paso Migrar la infraestructura criptogr\u00e1fica de pagos a la nube es una decisi\u00f3n estrat\u00e9gica que puede ofrecer escalabilidad, eficiencia y agilidad. Sin embargo, tambi\u00e9n plantea desaf\u00edos en t\u00e9rminos de control, seguridad y cumplimiento normativo. En este art\u00edculo analizamos los 4 puntos clave que […]<\/p>","protected":false},"author":1,"featured_media":11645,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-11644","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-noticias"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/posts\/11644","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/comments?post=11644"}],"version-history":[{"count":0,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/posts\/11644\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/media\/11645"}],"wp:attachment":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/media?parent=11644"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/categories?post=11644"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/tags?post=11644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- \n
- \n
If defined by the cloud provider, your organization loses direct control.<\/p>\n<\/li>\n
- \n
If you enter your company, you keep sovereignty and security on the root key.<\/p>\n<\/li>\n<\/ul>\n
Recommendation:<\/strong> evaluates models of shared responsibility and requires clarity in contract with your provider.<\/p>\n
2. Integration with the Host: technical challenges<\/span><\/h2>\n
The interfaces in the cloud are not always identical<\/strong> an HSM on-premises. This may involve adjustments in the integration code or in the processes of authentication.<\/p>\n
- \n
- \n
Impact on legacy systems.<\/p>\n<\/li>\n
- \n
Possible changes in communication protocols.<\/p>\n<\/li>\n
- \n
Development and testing costs additional.<\/p>\n<\/li>\n<\/ul>\n
Tip expert:<\/strong> involve your development team from the beginning of the project.<\/p>\n
3. Ceremony of the Keys in the cloud<\/span><\/h2>\n
The ceremony of the keys<\/strong> ensures safety by dual control<\/strong> and split knowledge<\/strong>. In cloud environments should be to redesign the procedure:<\/p>\n
- \n
- \n
Define how to engage the parties in remote.<\/p>\n<\/li>\n
- \n
Record the traceability of the ceremony.<\/p>\n<\/li>\n
- \n
To comply with the guidelines of the PCI PIN.<\/p>\n<\/li>\n<\/ul>\n
4. Compliance with PCI PIN: the decisive factor<\/span><\/h2>\n
Migrate without considering the regulatory compliance can result in rework, sanctions and loss of confidence. Have a QPA (Qualified PIN Assessor)<\/strong> ensures that migration to comply with PCI PIN<\/strong>avoiding deviations.<\/p>\n
The migration cryptographic to the cloud is viable and strategic, but it must be done with a solid plan. To define key control, review, technical integration, to design ceremonies safe and supported in a QPA are essential steps.<\/p>\n
Are you evaluating to migrate your payments infrastructure to the cloud?<\/strong> In IQ Information Quality we guide you through the process with 17 years of experience in PCI DSS and PCI PIN. \ud83d\udc49 Contact us.<\/a><\/em><\/p>\n
Sources consulted<\/h6>\n
- \n
- \n
PCI Security Standards Council \u2013 PCI PIN Security Requirements<\/a><\/h6>\n<\/li>\n
- \n
NIST \u2013 Key Management Guidelines,\u00a0<\/a>Thales Group \u2013 Cloud HSM, <\/a>AWS CloudHSM<\/a><\/h6>\n<\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"
Migrar infraestructura criptogr\u00e1fica a la nube,\u00a04 puntos clave antes de dar el paso Migrar la infraestructura criptogr\u00e1fica de pagos a la nube es una decisi\u00f3n estrat\u00e9gica que puede ofrecer escalabilidad, eficiencia y agilidad. Sin embargo, tambi\u00e9n plantea desaf\u00edos en t\u00e9rminos de control, seguridad y cumplimiento normativo. En este art\u00edculo analizamos los 4 puntos clave que […]<\/p>","protected":false},"author":1,"featured_media":11645,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-11644","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-noticias"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/posts\/11644","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/comments?post=11644"}],"version-history":[{"count":0,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/posts\/11644\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/media\/11645"}],"wp:attachment":[{"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/media?parent=11644"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/categories?post=11644"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iqcol.com\/en\/wp-json\/wp\/v2\/tags?post=11644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- \n
- \n
- \n
- \n