Welcome to the KES wiki! Here, you can find information about MinIO's KES project - including architecture and configuration guides, best practices and general documentation.

KES is a stateless and distributed key-management system for high-performance applications. We built KES as the bridge between modern applications - running as containers on Kubernetes - and centralized KMS solutions. Therefore, KES has been designed to be simple, scalable and secure by default. It has just a few knobs to tweak instead of a complex configuration and does not require a deep understanding of secure key-management or cryptography.

If you're new to KES you may want to checkout our Get Started Guide, our Configuration guide or read more about how KES works at our Concepts page.

• Configuration

• Hashicorp Vault
• Fortanix SDKMS
• Thales CipherTrust Manager / Gemalto KeySecure
• Entrust KeyControl
• AWS SecretsManager
• GCP SecretManager
• Azure KeyVault
• Filesystem

• Server API
• Go SDK API

• MinIO Object Storage
• TLS Proxies
• Logging
• Monitoring
• Migration
• Systemd

• Introducing KES - Key Management at Scale