Preparing for external key management

You can manage your encryption keys by using an external key management service with a Content Platform Engine container environment.

About this task

You can centralize key management for your FileNet® P8 environment as a service that is external to Content Platform Engine. This choice moves the management of encryption keys to the centralized key management service of your choice, under your control, for improved security and privacy protection. This centralized, external option can replace the default method- native key management in Content Platform Engine.

The Security administrator must perform certain configurations to enable external key management for your FileNet P8 system. This configuration is optional and does not apply if you do not plan to use external key management in your environment.

To use external key management in a container environment, you must set up your key management service and then perform additional configuration steps for your Content Platform Engine container. Detailed information is available in the FileNet Content Manager Knowledge Center.

Procedure

To configure external key management:

Follow the instructions and all related procedures in the following topic: