A centralized key management software for handling your sensitive encryption keys
Centralized enterprise key management
Unified Key Orchestrator for IBM® z/OS®, formerly IBM® Enterprise Key Management Foundation-Web Edition, is a key management software that centrally orchestrates and secures the lifecycle of encryption keys across your enterprise for both on-premises and multiple cloud environments, including IBM Cloud®, AWS KMS, Azure Key Vault and Google Cloud.
Orchestrate the lifecycle of keys from a single pane of glass using a shared mental model across all keystores regardless of whether the keys are stored in multiple clouds or on premises.
Generate and push keys to key stores across hybrid multicloud deployments such as IBM Cloud, Microsoft Azure, Amazon Web Services and Google Cloud Platform.
Back up and recover key material with a central repository database and one-click key recovery to mitigate the loss of access due to cryptographic erasure.
Features
Orchestrate the different stages of the key lifecycle such as generation, storage, distribution, rotation, revocation and destruction. Key generation occurs in IBM Z crypto express cards using policies called key templates.
Manage standardized post-quantum cryptography (PQC) algorithms with support for generating, managing and distributing ML-KEM and ML-DSA keys.
Integrate key management with your business processes. Leverage UKO for z/OS Crypto Connect API to expand functionality with Crypto Connect Advanced Crypto Service Provider (CC ACSP), Crypto Connect Crypto Analytics Tool (CC CAT), and Crypto Connect Microsoft Double Key Encryption (CC MSDKE).
Use role-based access control, dual control through separation of privileges and vaults to create multiple levels of access management.
Keep track of key management processes with audit logging.
Orchestrate the different stages of the key lifecycle such as generation, storage, distribution, rotation, revocation and destruction. Key generation occurs in IBM Z crypto express cards using policies called key templates.
Manage standardized post-quantum cryptography (PQC) algorithms with support for generating, managing and distributing ML-KEM and ML-DSA keys.
Integrate key management with your business processes. Leverage UKO for z/OS Crypto Connect API to expand functionality with Crypto Connect Advanced Crypto Service Provider (CC ACSP), Crypto Connect Crypto Analytics Tool (CC CAT), and Crypto Connect Microsoft Double Key Encryption (CC MSDKE).
Use role-based access control, dual control through separation of privileges and vaults to create multiple levels of access management.
Keep track of key management processes with audit logging.
Technical details
When planning to install UKO, it is important to understand planning considerations and program requirements.
Resources
Related products
A centralized enterprise key management for streamlining the orchestration of the lifecycle of encryption keys.
Protect your data across multicloud environments and keep your own key (KYOK) for exclusive key control.
Centralize, simplify and automate encryption key management process to protect encrypted data.