Control Your Encryption Keys in the Cloud
Generate your encryption keys on-premises for use in the cloud
When encrypting workloads in the cloud, you want to know exactly where and how your cryptographic keys were created and have total control of them. But you can’t get that assurance with native cloud provider keys, and you can’t use those keys across multiple clouds.
With the BYOK functionality provided by Entrust KeyControl, you can create your encryption keys on-premises, back them up, and export them to the cloud securely.
Download our "Key Management in the Cloud" white paper for an overview of the key management lifecycle, and the options and best practices for key ownership, control, and possession in the cloud.
工作原理
Benefits of KeyControl BYOK
KeyControl BYOK provides full granular control and key lifecycle management for your keys across clouds, with a GUI tool – a single pane of glass.
Automated key rotation, backups, and expiry actions simplify management and compliance with your security policies
KeyControl BYOK integrates seamlessly with optional nShield FIPS 140-2 Level 3 HSMs and can be upgraded with Entrust DataControl for a multi-cloud encryption solution.
KeyControl for Virtualized Environments
KeyControl also provides key management for virtualized encrypted workload environments.