Overview

Note: Encryption or decryption of data will not function if the External Key from the External key manager (EKM) is modified or inaccessible.

Add key

1. Sign in to Zoho Directory .

2. Click Admin Panel, then click Security.

3. Click BYOK, then click Setup.
   
   
   
   Note: Click Add key on the right if you already have a key added.
   
   
   
   

4. In the Add key screen, enter the Key name, select applications, and choose your key type as External key manager.
   

Note: The key name cannot be edited if you've chosen all available apps. Only one key can be applied to an app, and apps already assigned will not be listed under Available applications.

5. Under Key details, provide the necessary details about your key provider.

• If you select your Key provider as AWS,
  enter the Client ID, Client secret, key ID, and Region.
  
  
  

• If you select your Key provider as Google KMS,
  enter the Key ring, Key ring name, Key version, and Location, upload the Service account key in JSON format, and toggle on Raw encrypt.
  
  
  

• If you select your Key provider as Thales CTM,
  enter the User name, Password, Key ID, and Domain.
  
  

• If you select your Key provider as Fortanix DSM,
  enter the API key, Key ID, and Domain.
  
  

6. Select the required cache duration from the drop-down list.
   

7. Click Add.
   

Note: When configuring BYOK for a specific service, the app will be removed from the default key. The app will be added back to the default key if the particular BYOK key is deleted.