Introduction

This document describes the integration of Microsoft 365 Double Key Encryption (DKE) with the Entrust KeyControl key management solution. KeyControl serves as a key manager for encryption keys by using various protocols, including KMIP.

Product configuration

Entrust has successfully tested the integration of Entrust KeyControl with Microsoft 365 DKE in the following configurations:

Product Version

Entrust KeyControl

10.2

Features tested

Entrust has successfully tested the following features:

  • Create DKE key

  • Rotate DKE key

  • Remove DKE key

  • Delete DKE key

  • Cancel DKE key deletion

Requirements

Licensing

DKE is supported with Microsoft 365 Enterprise E5 or above licenses. See System and licensing requirements for DKE.

Microsoft 365 applications

DKE is supported on Microsoft 365 applications on Windows desktop versions. It is not supported for access via the web or Mac versions of Microsoft 365.

Documentation

Before starting the integration process, familiarize yourself with: