Understanding the requirements

• You must generate your KEKs and add them to the keks.json file:

  • For symmetric encryption/decryption, add the KEKs in the keks or encrypted_keks sections of the file,

  • For asymmetric encryption/decryption, add the KEKs in the keys section of the file.

  For more information, see Configuring KEKs.

• The Key Access Management module is compatible with a KMS, but the /rewrap route is not available and will return a 404 error in KMS mode.

• For information on global requirements and recommendations, refer to section Understanding the global requirements