OCI External Key Management

oci Key managementoci-external-key-management

Master keys held in a third-party key management system outside OCI, referenced from a vault.

Provider: oci
Kind: Key management
Category: Security
Official docs: https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/external_key_management.htm

Properties · 4 set by this component

property	type	values	required	kind default	this component
cryptoOperationsExternal · component property	boolean	—	no	true	inherited
envelopeEncryption	boolean	—	no	false	▸ true
hsm	boolean	—	no	false	▸ true
keyMaterialImportedToOci · component property	boolean	—	no	false	inherited
keyMaterialLocation · component property	enum	external-kms \| oci-hsm \| oci-software	no	external-kms	inherited
managed	boolean	—	no	true	▸ false
rotationAutomated	boolean	—	no	false	▸ false
rotationDays	integer	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "external-key-management", component: "oci-external-key-management" }

Other Key management products · 53

Certificate Management Servicealibaba-certificate-managementalibabacloudkey-management Data Encryption Servicealibaba-data-encryption-servicealibabacloudkey-management AWS Certificate Manageraws-acmawskey-management AWS KMSaws-kmsawskey-management AWS Payment Cryptographyaws-payment-cryptographyawskey-management AWS Private Certificate Authorityaws-private-caawskey-management AWS Secrets Manageraws-secrets-managerawskey-management AWS Signeraws-signerawskey-management AWS Systems Manager Parameter Storeaws-ssm-parameter-storeawskey-management AWS CloudHSMcloudhsmawskey-management Artifact Signingazure-artifact-signingazurekey-management Azure Cloud HSMazure-cloud-hsmazurekey-management Azure Dedicated HSMazure-dedicated-hsmazurekey-management Azure Key Vaultazure-key-vaultazurekey-management Azure Key Vault Managed HSMazure-managed-hsmazurekey-management Advanced Certificate Managercloudflare-advanced-certificate-managercloudflarekey-management Cloudflare Geo Key Managercloudflare-geo-key-managercloudflarekey-management Cloudflare Keyless SSLcloudflare-keyless-sslcloudflarekey-management Cloudflare mTLS client certificatescloudflare-mtlscloudflarekey-management Cloudflare Origin CAcloudflare-origin-cacloudflarekey-management Cloudflare Secrets Storecloudflare-secrets-storecloudflarekey-management Cloudflare Universal SSLcloudflare-ssl-tlscloudflarekey-management Bitwardenbitwardenkey-management cert-managercert-managerkey-management CyberArk Conjurconjurkey-management Dopplerdopplerkey-management EJBCAejbcakey-management Entrust nShield HSMentrust-nshieldkey-management HashiCorp Vaulthashicorp-vaultkey-management HCP Vault Dedicatedhcp-vaultkey-management Infisicalinfisicalkey-management Generic key managementkey-managementkey-management 1Password Connectonepassword-connectkey-management OpenBaoopenbaokey-management Sealed Secretssealed-secretskey-management Smallstep step-castep-cakey-management Thales Luna HSMthales-luna-hsmkey-management Certificate Authority Servicegoogle-certificate-authority-servicegcpkey-management Certificate Managergoogle-certificate-managergcpkey-management Cloud External Key Managergoogle-cloud-ekmgcpkey-management

and 13 more → Key management page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Oracle Cloud External Key Management: master keys live in a third-party key management system outside OCI.
3# Defaults from "External Key Management Service" and "How External KMS Works": key material is never imported
4# into OCI, only key references are stored in the vault, and cryptographic operations run in the external KMS.
5schemaVersion: "1"
6type: "component"
7id: "oci-external-key-management"
8kind: "key-management"
9provider: "oci"
10docs: "https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/external_key_management.htm"
11defaults:
12  managed: false
13  hsm: true
14  rotationAutomated: false
15  envelopeEncryption: true
16properties:
17  keyMaterialLocation:
18    type: "enum"
19    values: ["external-kms", "oci-hsm", "oci-software"]
20    default: "external-kms"
21  keyMaterialImportedToOci:
22    type: "boolean"
23    default: false
24  cryptoOperationsExternal:
25    type: "boolean"
26    default: true

The same page as markdown, for an agent: /catalogue/components/oci-external-key-management.md