OCP Global Summit 2026: Marvell, Microsoft and Oracle Establish OCP Working Group to Standardize Data Center Hardware Security

Summary:

• New Open Compute Project (OCP) working group: Companies form a new working group to standardize on a silicon-based and attested secure integrated hardware security module (HSM) solution for cloud and hyperscale data center infrastructure
• Strengthening cloud security: Secure key caching and attestation cryptographic key lifecycle management at the server level will reduce latency, improve scalability and strengthen the security posture of cloud compute workloads
• Open technical specification: Initial draft of technical specification to be released at OCP Global Summit in October 2026, paving the way for broad industry adoption of in-server security for data centers

Marvell Technology, Inc., Microsoft Corporation and Oracle announced a collaborative effort aligned with the Open Compute Project (OCP) aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.To direct this effort, the three companies have established a new OCP working group under OCP’s Security Track. The working group’s charter is to define open specs for an integrated hardware security module for secure key caching and cryptographic key lifecycle management directly at the server level. This approach will reduce latency, improve scalability and strengthen the security posture of cloud compute workloads.

Most cloud and enterprise servers today rely on network-attached hardware security modules (HSMs) or software-only key management. This approach requires cryptographic keys to traverse the network or reside in unprotected, non-FIPS 140-3 Level 3 memory, exposing sensitive keys to potential security attacks. The working group will define an open spec for embedding a hardware security boundary, key vault and attestation chain directly into the server. This will ensure that cryptographic operations execute where data is processed, keys never leave a certified hardware boundary and workload integrity can be proven cryptographically to any relying party.

“An integrated HSM will allow cryptographic key operations to execute where the workload runs, satisfying both regulatory compliance and zero-trust architecture requirements, all without compromising higher performance for security,” said Cary Ussery, SVP and GM, multimarket business group, Marvell. “By defining this as an open spec, we’ll make that capability available to the entire industry.”

“As AI transforms cybersecurity and quantum technology reshapes cryptography, protecting the keys and credentials at the heart of our digital infrastructure has never been more important,” said Mark Russinovich, CTO, deputy CISO and technical fellow, Microsoft Azure. “Through the Open Compute Project, industry leaders are coming together around a fully open-source integrated HSM, combining our collective innovation to advance interoperability, accelerate the adoption of post-quantum cryptography, and shape the future of hardware security.”

“An open spec for integrated Hardware Security Module (HSM) capabilities is an important step toward enabling cryptographic operations where data is processed, protecting keys within a hardware security boundary and supporting cryptographic verification of workload integrity,” said Pradeep Vincent, EVP, compute and AI infrastructure, Oracle. “This effort aims to establish a common foundation for adoption across the industry.”

About OCP and the New Security Working Group
The Open Compute Project (OCP) is a collaborative community focused on redesigning hardware technology to efficiently support the growing demands of compute infrastructure.

As founding members of the new OCP working group, Marvell, Microsoft and Oracle collaborated with the broader OCP community to publish a joint technical specification, with an initial draft targeted for release around the 2026 OCP Global Summit and version 1.0 to follow.

Organizations interested in participating in the security working group are encouraged to join through the Open Compute Project.