This section describes the configuration steps required on Utimaco Enterprise Secure Key Manager (ESKM) to establish the HYOK integration. The following sections guide you through the ESKM-side configuration, including the creation of the OCI-HYOK cloud instance and the management of cryptographic keys that remain under the control of ESKM while being referenced by OCI. The procedures assume that ESKM is already installed, configured, and accessible to an administrator. Therefore, the installation and general administration of ESKM are outside the scope of this chapter. The required OCI configuration and connection information is also assumed to have been prepared as described in the preceding section. Configuration of specific OCI services that will consume or use the externally managed cryptographic keys is not covered and must be performed separately according to the requirements of the corresponding OCI service.
