OCI External Key Management Service (External KMS) enables you to securely store and control keys on a third-party key management system outside OCI. You can then use the external key for encrypting/decrypting data in Oracle. With the actual key residing in the third-party key management system, you control the administration and management of your keys. OCI External KMS forwards your cryptographic operations to the third-party key management system (for example, Thales CipherTrust Manager). This service is for customers who have regulatory compliance to store keys outside the Oracle Cloud or any third-party cloud premises.

For more information, see External Key Management Service.