HSM Management on Kubernetes

This section contains tutorials for configuring an external key management service (KMS) to store a MinIO KMS Hardware Security Module (HSM) key. MinIO KMS uses HSM keys to protect the encryption key database.

These procedures require the following:

• An existing MinIO KMS installation
• A client machine with the minkms client installed
• Access to the MinIO KMS root or “superadmin” key

For instructions on configuring an external KMS in Linux environments, see the HSM Management on Linux section.