A municipality moves to Azure with its own key control
When a data centre had to be vacated during refurbishment, external key management became part of the municipality's temporary Azure solution.
An operational need at short notice
A Swedish municipality needed to vacate its data centre during an extended refurbishment. The task was to keep services running while handling information with demanding protection requirements. The municipality chose to temporarily place servers and data in Microsoft Azure.
The risk and impact assessment led to a clear requirement: the municipality wanted to control encryption and the key lifecycle through a separate key service in Sweden.
KMS and HSM in a separate environment
Complior delivered a KMS service from Swedish data centres with HSM-based key protection. The municipality could define which systems were permitted to use the keys and manage their creation, rotation, locking and deletion.
The solution used a client on the Azure workloads to apply encryption and communicate with the key platform. The client, policies and central key management needed to work together. How the client handles key material and what happens during an outage are aspects of the specific integration.
A shared view of protection
The centralised approach gave the IT organisation a clearer overview of which keys and policies belonged to different systems. That information could be used when making changes, troubleshooting and conducting reviews.
With key management as a separate part of the solution, the municipality gained a way to control protection even during the temporary migration.