Overview of the Partner Product
Oracle Cloud Infrastructure (OCI) is Oracle's cloud platform providing a broad range of infrastructure and platform services, including compute, storage, databases, and security services. OCI provides the Key Management Service (KMS) and Vault capabilities for creating, storing, and managing cryptographic keys used to protect data at rest across OCI services.
For the HYOK integration, OCI provides the cloud-side capabilities required to use cryptographic keys that are managed externally through the Utimaco Enterprise Secure Key Manager (ESKM).
Overview of ESKM
ESKM is a centralized key management solution that securely stores, distributes, and manages encryption keys throughout their lifecycle. It supports industry standards, including the KMIP, enabling integration with various enterprise applications and storage systems.
Joint Value Proposition
The integration of Oracle Cloud Infrastructure (OCI) with Utimaco Enterprise Secure Key Manager (ESKM) enables customers to maintain cryptographic keys within the ESKM environment while allowing supported OCI services to use externally managed keys.
In the HYOK model, cryptographic keys are created and managed within the Utimaco ESKM environment and are not transferred to or stored as key material within OCI KMS. OCI uses the externally managed key through the integration with ESKM, while ESKM remains responsible for the management and lifecycle of the cryptographic key.
The HYOK integration provides customers with greater control over their cryptographic keys by keeping the key material within the ESKM environment while enabling its use by supported OCI services.
This joint solution combines OCI's cloud-native services and encryption capabilities with the centralized key management and security capabilities of Utimaco ESKM. It enables organizations to maintain control over their cryptographic key material and its lifecycle while leveraging OCI services, supporting enterprise security, governance, and compliance requirements.