Third-Party Key Management Support

The following key management servers are supported.

• Key Management Interoperability Protocol (KMIP) key management server products of any version:

  • AWS CloudHSM

  • Entrust KeyControl KMIP Vault

  • Fortanix Data Security Manager

  • Google Cloud

  • HashiCorp Vault

  • IBM Security Key Lifecycle Manager (SKLM)

  • Safenet

  • StorMagic SvKMS

  • Thales CipherTrust Manager

  • Vormetric

    Note

    • To use a KMIP key management server other than the products listed above, contact your software provider.
    • The certificate used must not be encrypted

• Amazon Web Services (AWS) key management service

• Microsoft Azure Key Vault

Support for Amazon S3 Encryption

Commvault supports the following Amazon S3 encryptions:

• Server-side encryption with Amazon S3-managed keys (SSE-S3)
• Server-side encryption with customer-provided keys (SSE-C)
• Server-side encryption with AWS KMS keys (SSE-KMS)
• Dual-layer server-side encryption with AWS KMS keys (DSSE-KMS)