PCI DSS v4.0 Requirement 3.7 mandates hardware-validated key management for payment card data. HSMs satisfy split knowledge and dual control through M-of-N quorum authentication, and key storage through FIPS-validated tamper-resistant hardware. Learn PCI DSS requirements, HSM types for payment environments, key ceremony steps, failure modes, and non-compliance consequences.