[jira] [Created] (IGNITE-12727) BYOK support

[Anton Vinogradov (Jira)]

Moti Nisenson-Ken created IGNITE-12727:
------------------------------------------

             Summary: BYOK support
                 Key: IGNITE-12727
                 URL: https://issues.apache.org/jira/browse/IGNITE-12727
             Project: Ignite
          Issue Type: Wish
            Reporter: Moti Nisenson-Ken


Transparent Data Encryption currently works with all keys being held by Ignite. It would be preferable if a Key Wrapping/Unwrapping facility (e.g. Azure Key Vault, IBM Key Protect) could be configured on a per-cache basis. By default the wrapper/unwrapper can just be pas-thru and return the key material as received. Additionally, unwrapping should be able to give a new "storage format" key (in case the underlying root keys have been rotated) which Ignite would then store in place of the original stored wrapped key.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)