HSM lifecycle management spans secure procurement, tamper-evident deployment, key custody, firmware validation, rotation, monitoring, and certified decommissioning.