Duokey Products & Integrations

Declare what you protect, never how. The Crypto Agility Plane resolves the algorithm, post-quantum posture, key and backend from central policy at runtime — flip a fleet to PQC with a policy edit, zero application code change. SDK for Java and .NET, operated by an AI/MCP control plane.

Safeguarding Microsoft Office 365 data with your secure Duokey HSM keys. Complete control over encryption keys with Microsoft Purview.

Extensible Key Management for Microsoft SQL Server. Protect databases with Transparent Data Encryption using external key management.

Azure Managed HSM External Key Manager proxy. Let Azure SQL TDE, Azure Storage, and other Customer-Managed Key workloads wrap and unwrap their keys with a key held in your DuoKey vault, over mutual TLS.

Register and manage your own AWS KMS, Azure Key Vault, or Google Cloud KMS keys as OpenAI Enterprise Key Management external keys, with guided per-provider grant setup and registration tracking.

Comprehensive certificate lifecycle management with HSM-protected keys. Issue, manage, and secure SSL/TLS certificates enterprise-wide.

External Key Store Proxy for AWS KMS. Maintain complete sovereignty over your encryption keys with external key managers (HashiCorp Vault, CyberArk, DuoKey MPC).

Integrate Duokey PKCS#11 provider with HashiCorp Vault Enterprise. Support for 12+ vault backends including DuoKey MPC, DuoKey SD-HSM, Securosys, Azure Key Vault, AWS KMS, Google Cloud KMS, Fortanix, Atos TrustWay, Crypto4A, Utimaco HSM, and OpenBao.

Auto-unseal OpenBao (open-source Vault fork) with DuoKey MPC. Zero Trust architecture with distributed key management and no single point of failure.

Integrate DuoKey Cockpit PKCS#11 with CyberArk Enterprise Password Vault. Hardware-protected master keys with HSM-grade security for privileged access management.

Transparent Data Encryption for Oracle Database with DuoKey MPC. Master encryption keys distributed across multiple nodes with auto-login wallet support for high availability.

DuoKey as the external key custodian for Percona PostgreSQL, MySQL/MariaDB, Cassandra, MongoDB and Couchbase encryption, and SQL Server Always Encrypted — engine-native TDE and client-side field/column encryption in one catalog.

DuoKey as the external key custodian for infrastructure-level encryption: LUKS, Prim'X Cryhod and BitLocker disk encryption (with BitLocker recovery-key escrow), Nutanix and VMware VM encryption over KMIP, and Databricks / generic tokenization.

An OASIS KMIP 2.1 server built into DuoKey Cockpit. Any KMIP-compliant client can create, retrieve and use cryptographic keys over TLS, with keys held in your tenant vault.

A Cryptoki 3.2 provider library that proxies every PKCS#11 operation to DuoKey Cockpit — the same provider behind the Oracle TDE and disk-encryption integrations.

Snowflake Tri-Secret Secure backed by DuoKey, via the AWS External Key Store proxy — combine your Snowflake-managed key, DuoKey's key, and AWS KMS for account-level customer-held key control.

Call recording encryption for Genesys Cloud. PCI DSS compliance for contact centers with real-time encryption/decryption and customer key sovereignty.

Cryptographic Posture Management. Continuously assess your cryptographic posture: discover quantum-vulnerable algorithms, build a CBOM and Quantum Readiness Score, and plan migration to post-quantum cryptography.