ENTRUST CSP Key Management Add-On

Add controlled key-ownership choices to an Entrust CSP environment with this CSP add-on. It covers three named approaches: bring your own key, hold your own key, and a native key management key. These options concern how cryptographic keys are supplied, held, or managed within the applicable CSP service, allowing architects to align the configuration with their organization’s key-control approach. SUB-CSP-OP-ADD-CKM is the ordering code for a CSP key-management add-on. Its stated scope is limited to the three key-related capabilities named for the CSP offering: BYOK, HYOK, and a native key management key. Select this add-on when the intended CSP configuration specifically requires one or more of those key-control modes, rather than when a general-purpose physical hardware component is needed. Key-management architecture can separate service operation from control of the cryptographic material. This add-on addresses that decision point by grouping key-source, key-custody, and native-key options under the CSP offering. Evaluate the intended CSP configuration for its required key source, custody model, and native-key requirement before applying the add-on, ensuring the selected option matches the organization’s intended cryptographic control boundary.