Canton Configuration of a KMS

Important

Daml Enterprise license required

Canton supports using a Key Management Service (KMS) to increase security of stored private keys. Note that for Canton to actually use a KMS you also need to decide and configure one of the two independent ways to use this service:

• Encrypted Private Key Storage
• External Key Storage

The KMS configuration is currently enabled for Amazon Web Services (AWS) KMS and Google Cloud Provider (GCP) KMS in Canton Enterprise.

• Configure Amazon Web Services (AWS) KMS
• Configure Google Cloud Provider (GCP) KMS