Manage the entire key lifecycle

The IBM® Key Protect for IBM Cloud® service helps you provision and store encrypted keys for apps across IBM Cloud services, so you can see and manage data encryption and the entire key lifecycle from one central location.

Features

• **KMIP support: **IBM Key Protect now directly offers the ability to create adapters for Key Management Interoperability Protocol (KMIP) for use with VMware and upload certificates for secure communication.
• **Self-managed encryption: **Use a root key to encrypt and decrypt the keys that protect your data.
• **Flexibility: **Apps on or outside IBM Cloud can integrate with the Key Protect APIs.
• **Built-in protection: **Deleted keys — and their encrypted data — can never be recovered.
• **Application-independent: **Generate, store, retrieve and manage keys independent of application logic.

Benefits

• **Bring your encryption keys to the cloud: **Fully control and strengthen your key management practices by securely importing symmetric keys from your internal key management infrastructure into IBM Cloud.
• **Robust security: **Provision and store keys using FIPS 140-2 Level 3 certified HSMs.
• **Control and visibility: **Use IBM Cloud Activity Tracker to monitor user and app activities.
• **Simplified billing: **Track subscription and credit spending for all accounts from a single view.