Auto unseal options

Vault
1

I’m looking to see what unseal options will work for my environment.

Does Vault support IBM KMS? The transit option looks interesting but would require opening up network access between systems. Is there a generic REST mechanism that could be used to plugin any KMS?

The doc don’t currently include IBM but that doesn’t always mean anything.
Sealing best practices | Vault | HashiCorp Developer.

2

I was doing some more searching and found that the kms code is in it’s own repo and someone has already created a PR (but its not approved)

1 Like