A link to the Entrust website
nShield Documentation
Videos Contact support

Bring Your Own Key for AWS Key Management Service and Entrust KeyControl: Integration Guide

    • Introduction
    • Deploy and configure KeyControl
    • Create an AWS IAM user service account
    • Integrate BYOK for AWS Key Management Service and KeyControl
    • Test the integration
    • Integrating with an HSM
    • Additional resources and related products
      • nShield Connect
      • nShield as a Service
      • KeyControl
      • KeyControl BYOK
      • KeyControl as a Service
      • Entrust products
      • nShield product documentation
Bring Your Own Key for AWS Key Management Service and Entrust KeyControl: Integration Guide
  • Adobe Acrobat Pro with Entrust Time Stamp Server: nShield® HSM Integration Guide
  • Adobe Experience Manager Forms: nShield® HSM Integration Guide
  • Amazon Web Services KMS External Key Store (XKS): KeyControl Cloud Key Management Vault (HYOK) Integration Guide
  • Amazon Web Services KMS External Key Store (XKS): nShield® HSM Integration Guide
  • Apache HTTP Server: nShield® HSM Integration Guide - CHIL
  • Apache HTTP Server: nShield® HSM Integration Guide - PKCS #11
  • AppViewX: nShield® 5c HSM Integration Guide
  • Axway Validation Authority: nShield® HSM Integration Guide
  • BeyondTrust Password Safe: nShield® HSM Integration Guide
  • Bring Your Own Key for AWS Key Management Service and Entrust KeyControl: Integration Guide
  • Bring Your Own Key for Google Cloud Key Management and Entrust KeyControl: Integration Guide
  • Bring Your Own Key for Microsoft Azure Key Vault and Entrust KeyControl: Integration Guide
  • Cohesity and Entrust KeyControl: Integration Guide
  • Commvault and Entrust KeyControl KMIP Vault: Integration Guide
  • CyberArk Conjur: nShield® HSM Integration Guide
  • CyberArk Privilege Access Security Enterprise Password Vault: nShield® HSM Integration Guide
  • DataStax Cassandra TDE and Entrust KeyControl: Integration Guide
  • Delinea Secret Server: nShield® HSM Integration Guide
  • EDB Postgres and Entrust KeyControl: Integration Guide
  • Entrust Certificate Authority: nShield® HSM Integration Guide for Linux
  • Entrust Certificate Authority: nShield® HSM Integration Guide for Windows Server
  • Entrust Identity as a Service and Entrust CloudControl: Integration Guide
  • Entrust Identity Enterprise: nShield® HSM Integration Guide
  • Entrust KeyControl Vault: nShield® HSM Integration Guide
  • Entrust KeySafe 5: KeyControl Compliance Manager Integration Guide
  • Entrust nShield 5C Quick Start Guide
  • Entrust PKI Hub: nShield® HSM Integration Guide
  • Entrust Validation Authority: nShield® HSM Integration Guide
  • F5 BIG-IP: nShield® HSM Integration Guide
  • F5 NGINX Server: nShield® HSM Integration Guide - PKCS #11
  • Google Cloud External Key Manager and Entrust KeyControl Vault: Integration Guide
  • HashiCorp Vault Enterprise and Kubernetes Support: nShield® HSM Integration Guide
  • HashiCorp Vault Enterprise: nShield® HSM Integration Guide
  • HID Global Validation Authority: nShield® HSM Integration Guide
  • Hitachi VSP G & E Series: KeyControl® Integration Guide
  • Home
  • HPE Alletra 5000 Storage Array: KeyControl® Integration Guide
  • HPE Alletra 6000 Storage Array: KeyControl® Integration Guide
  • HPE Alletra 9000 Storage Array: KeyControl® Integration Guide
  • HPE StoreEver MSL3040/6480 Tape Library: KeyControl® Integration Guide
  • Hyperledger Fabric: nShield® HSM Integration Guide
  • IBM Blockchain: nShield® HSM Integration Guide
  • IBM DB2 and Entrust KeyControl: Integration Guide
  • Kubernetes and Entrust KeyControl Secrets Vault: Integration Guide
  • Kubernetes Storage Encryption with Entrust KeyControl Vault: Integration Guide
  • MariaDB and Entrust KeyControl Vault: Integration Guide
  • Microsoft AD CS and NDES: nShield® HSM Integration Guide for Microsoft Windows Server
  • Microsoft AD CS and OCSP: nShield® HSM Integration Guide
  • Microsoft AD Federation Service: nShield® HSM Integration Guide
  • Microsoft Authenticode: nShield® HSM Integration Guide
  • Microsoft Double Key Encryption and Entrust KeyControl: Integration Guide
  • Microsoft Host Guardian Service and Shielded Virtual Machines: nShield® HSM Integration Guide
  • Microsoft Internet Information Services and Windows Server 2019: nShield® HSM Integration Guide
  • Microsoft Internet Information Services: nShield® HSM Integration Guide
  • Microsoft Sentinel and Entrust KeyControl Vault: Integration Guide
  • Microsoft SQL Server Always Encrypted: nShield® HSM Integration Guide
  • Microsoft SQL Server TDE and Entrust KeyControl: Integration Guide
  • Microsoft SQL Server: nShield® HSM Integration Guide
  • Mirantis Kubernetes Engine: nShield® HSM Integration Guide
  • MongoDB and Entrust KeyControl Vault: Integration Guide
  • NetApp ONTAP and Entrust KeyControl: Integration Guide
  • NetApp StorageGRID and Entrust KeyControl: Integration Guide
  • Nutanix and Entrust KeyControl: Integration Guide
  • OneSpan Authentication Server Framework: nShield® HSM Integration Guide
  • OpenSSL 3: nShield® HSM Integration Guide
  • Oracle Key Vault 18.x: nShield® HSM Integration Guide
  • Oracle Key Vault 21.9: nShield® HSM Integration Guide
  • Oracle MySQL and Entrust KeyControl Vault: Integration Guide
  • Oracle Transparent Data Encryption and Entrust KeyControl Database Vault: Integration Guide
  • Oracle Transparent Data Encryption: nShield® HSM Integration Guide
  • Oracle Transparent Data Encryption: Web Services Option Pack (WSOP) Integration Guide
  • Palo Alto Networks Firewall: nShield® HSM Integration Guide
  • Pure Storage FlashArray and Entrust KeyControl: Integration Guide
  • Red Hat Certificate System: nShield® HSM Integration Guide
  • Red Hat OpenShift and Entrust CloudControl: Integration Guide
  • Red Hat OpenShift and KeyControl Vault Secrets Integration Guide
  • Red Hat OpenShift: nShield® HSM Integration Guide
  • Scality RING and Entrust KeyControl: Integration Guide
  • Time Stamp Option Pack: nShield® HSM Integration Guide for Microsoft 365
  • UiPath Robotic Process Automation: nShield® Integration Guide
  • Veeam Backup & Replication and Entrust KeyControl®: Integration Guide
  • Venafi TLS Protect Datacenter: nShield® HSM Integration Guide
  • VMware Tanzu and Entrust CloudControl: Integration Guide
  • VMware Tanzu Kubernetes Grid: nShield® HSM Integration Guide
  • VMware Trust Authority and Entrust KeyControl: Integration Guide
  • VMware vSphere and Entrust CloudControl: Integration Guide
  • VMware vSphere and Entrust KeyControl KMIP Vault: Integration Guide
  • Bring Your Own Key for AWS Key Management Service and Entrust KeyControl: Integration Guide
  • Integrating with an HSM
View guide as PDF
Email the nShield docs team

Integrating with an HSM

For guidance on integrating the KeyControl with a Hardware Security Module (HSM), consult with your HSM vendor. If you are using an Entrust nShield HSM, refer to the Entrust KeyControl nShield HSM Integration Guide available at Entrust documentation library.

©2025 Entrust Corporation. All rights reserved.

This website was last updated on