Introduction

Entrust KeyControl has been rebranded as the Entrust Cryptographic Security Platform (CSP) Key Manager.

The Entrust CSP Key Manager continues to provide a comprehensive solution for discovering and managing the lifecycles of cryptographic keys, secrets, certificates, tokens, libraries, protocols, and configurations:

  • The KeyControl Compliance Manager is now the Entrust CSP Compliance Manager. It still integrates with Entrust nShield Hardware Security Modules (HSMs) to protect the master keys for the CSP.

  • KeyControl Vault is now the Entrust Cryptographic Security Platform Vault. The Cryptographic Security Platform Vaults also still integrate with Entrust nShield HSMs to provide an optional HSM root of trust.

Because the Entrust integrations are tested against specific product versions, this guide is still branded as a "KeyControl" integration. It was tested against a pre-CSP version of KeyControl.

Exercise caution when using an Entrust Integration Guide with a product version that does not match the tested version, because your version might not function in exactly the same way.

Entrust cannot guarantee the success of integrations in configurations other than those indicated in the guide. This guide remains on the website for customers using pre-CSP versions of KeyControl.

Entrust KeyControl is a Key Management System (KMS) offers functionalities to create, manage, distribute, and safeguard cryptographic keys. It is deployed as a cluster of virtual appliances that integrate with FIPS 140-2-compliant third-party hardware security modules (HSM) to securely store keys.

Using EDB Postgres Advanced Server or EDB Postgres Extended Server TDE capabilities along with Entrust KeyControl for key management protect sensitive data wherever those data reside.

Documents to read first

Product configuration

Product Version Notes

RedHat Linux

9.4

Red Hat Enterprise Linux release 9.4 (Plow)

EDB Postgres

16.4.1

PostgreSQL 16.4 (EnterpriseDB Advanced Server 16.4.1)

KeyControl Vault KMS

10.3.1

KMIP Vault installed and deployed per your environment

Python

3.9

Installed on the Linux server