Your suggested change has been received. Thank you.

close

Suggest A Change

https://thales.na.market.dpondemand.io/docs/dpod/services/kmo….

Thales Logo

All

  • All
back

BYOK REST APIs

search

Please Note:

BYOK REST APIs

Key Manager and CADP for Java uses the Bring Your Own Key (BYOK) feature from cloud service providers to provide key management for encryption over cloud. The BYOK service provides increased control over the key used for encryption/decryption of data because of the following reasons:

  • The key is generated on demand.

  • The key is not stored in the cloud after the operation is complete.

  • The key is not stored for the session as defined.

The data encryption key is cached in the cloud only for the user specified duration. After this duration is expired, the new key should be fetched from the key service provider (Key Manager).

The following cloud services are supported:

  • Salesforce

  • Amazon Web Services

This article does not explain the concept of BYOK. The scope of this topic is limited to how to use Key Manager and CADP for Java with BYOK caching feature. To know about BYOK, refer to CipherTrust Application Data Protection for JAVA - Bring Your Own Key.

On this page