Deploying the KACLS infrastructure

The table below lists the various steps involved in deploying the KACLS.

Click on a link to open the corresponding procedure in this guide.

Steps Description
1 Configuring the identity provider and Configuring Google Workspace Client-side encryption
2 Setting up the infrastructure and install the Stormshield KMaaS
3 Configuring the config.json file and Configuring the KACLS
4

Configuring Key Encryption Keys (KEKs)

- or -
5 Setting up a network configuration that can be reached via Google Workspace
6 Running the Stormshield KMaaS
7

Checking system health

8

Configuring load balancing
9 (Optional) Using the Stormshield KMaaS for Google Workspace in HTTPS and Securing the Stormshield KMaaS with HTTPS
10

Setting up logging

11 (Optional) Customizing the authorization rules by applying an OPA policy and Customizing the authorization rules

In the table below are the various steps involved in adding Stormshield KMaaS in Google Workspace. Click on a link to open the corresponding procedure in the Stormshield KMaaS guide or in Google help.

Steps Description
1 Setting up your external key service
2 Connecting Google Workspace to the external key service
3 Connecting Google Workspace to the Identity provider
4 Indicating the well-known file in the config.json file
5 Enabling the service for users: Drive, Meet, Calendar, Gmail