Oracle Cloud Infrastructure Security

Externally Manage and Store Oracle Cloud Infrastructure Keys

Control your data and encryption keys for digital sovereignty and meet compliance requirements

Meet compliance mandates such as PCI DSS, GDPR, and CCPA
Streamline encryption management with seamless key rotation
Reduce administration costs with centralized key and policy management
Optionally store encryption keys in FIPS 140-2 Level 3 hardware security module

OCI EKMS with Thales CipherTrust

Oracle Cloud Infrastructure (OCI) External Key Management Service (EKMS) is a new capability that allows customers to protect their data in OCI using encryption keys held inside CipherTrust Manager external to OCI.

CipherTrust Cloud Key Management (CCKM), which is a licensed component of the CipherTrust Manager, delivers external key storage, key generation, separation of duties, reporting, and key life cycle management to help fulfill internal and industry data security mandates. FIPS140-2 Level 3 certification available.

Benefits

Move critical workloads with sensitive data to Oracle Cloud Infrastructure
Maintain sovereign control of sensitive data
Gain strong key control and security

Enabling Organizations To

Maximize choice from a single console, manage Native, BYOK, HYOK keys across clouds
Demonstrate compliance with privacy regulations such as GDPR, Shrems II, PCI-DSS, CCPA
Improve operational sovereignty to protect against internal and external bad actors
Reduce threat surface by centralizing control of keys outside of cloud providers
Increase efficiency and reduce costs by simplifying and automating key management
Increase efficiency and reduce costs by simplifying and automating key management

Related products

CipherTrust Data Security Platform

Addressing the security and performance demands of the largest, most performance-intensive environments, including those of enterprises, government agencies, and cloud service providers, the CN6000 Series encryptors offer variable-speed licenses up to 10 Gbps.