Stormshield KMaaS 3.0 new features and enhancements

Collaboration with external users

The users are now able to securely share Google Drive files (Docs, Sheets and Slides) with other users who work in different companies equipped with Google Client-Side Encryption.

There are two ways to configure this feature:

• Through the local configuration file, config.json, by specifying several identity providers in the local_cse_configurations section,

• Through a remote configuration file, /.well-known/cse-configuration, located at the root of your domain.

Key management system (KMS)

It is now possible to add a key management system (KMS) to your Stormshield KMaaS infrastructure to secure key storage. In such a configuration, the key encryption keys (KEKs) are protected with a master key managed by the KMS. The KEKs in the keks.json file are thus encrypted.

New NodeJS 16 requirement

Stormshield KMaaS now requires NodeJS 16 to benefit from the latest security updates. It is available with RedHat Enterprise 8.