Introduction

This document describes how to integrate Microsoft Azure Key Vault Bring Your Own Key (BYOK) with the Entrust Cryptographic Security Platform Key Management Vault (Key Management Vault). It provides instructions for configuring the Key Management Vault as a Key Management Service (KMS) for Azure BYOK.

The Key Management Vault provides a comprehensive solution for managing the lifecycle of cryptographic keys. In addition, it can be integrated with Entrust nShield HSMs to help organizations meet security and compliance requirements.

Product configurations

Entrust has successfully integrated the Key Management Vault with Azure BYOK in the following configurations:

System Version

Entrust Cryptographic Security Platform

1.6.1

Features tested

Entrust has successfully tested the following features:

  • Create cloud key

  • Rotate cloud key

  • Remove cloud key

  • Upload removed cloud key

  • Delete cloud key

  • Cancel cloud key deletion

Requirements

  • A Microsoft Azure subscription.

  • Access to the Entrust TrustedCare Portal.

  • A virtual environment or servers on which to deploy the Entrust CSP.

Familiarize yourself with the following: