SQL Server can create and store keys internally, protected by software only. With Extensible Key Management (EKM), SQL Server can use keys protected by an HSM for data and key encryption/decryption.
The SecurityServer EKM provider offers EKM functionality for Utimaco SecurityServer HSMs, supporting different symmetric and asymmetric algorithms. The location of the database is defined in the configuration file.