Skip to main content
Infisical Key Management System (KMS) stores cryptographic keys and runs operations with them, such as encryption and signing, so your applications never have access to the keys themselves. You can use your keys from the Infisical UI, the API, KMIP clients, Kubernetes, and Sigstore Cosign.
To learn how Infisical KMS protects your keys, check out the Concepts page.

​
Keys

Create keys in a KMS project, then use them to process your data:

Create and manage keys

Create the keys that your applications use.

Encrypt and decrypt

Encrypt and decrypt data with a key in Infisical KMS.

Sign and verify

Sign data and verify signatures with a key in Infisical KMS.

Generate and verify MACs

Use message authentication codes to check that data hasn’t changed.

Rotate keys

Replace a key’s key material without changing your applications.

Export and import keys

Move key material in and out of Infisical KMS.

​
KMIP

Let storage arrays, databases, and other KMIP clients manage their keys in Infisical:

Overview

Let devices and software that support KMIP manage their keys.

Deploy a KMIP server

Run the KMIP server that your KMIP clients connect to.

Connect KMIP clients

Connect a KMIP client to the keys in a KMS project.

Dell PowerEdge SEKM

Encrypt the drives in Dell PowerEdge servers with keys from Infisical KMS.

​
Integrations

Use your keys from tools that support Infisical KMS:

Kubernetes encryption

Encrypt Kubernetes secrets at rest with a key in Infisical KMS.

Sigstore Cosign

Sign container images with a key in Infisical KMS.