Security

KMS can run as an in-process library or as an HTTP service. Security posture depends on deployment configuration.

Start here:

• Overview
• Security stance
• Operations
• Local vs remote KMS
• Authorization and bindings
• Sessions
• Authentication factors
• Additional authenticated data
• Root master keys
• Fallback recovery
• Crash dumps