Server-Side Object Encryption with KES

Mon, 01 Jan 0001 00:00:00 +0000

This procedure assumes you have access to a Kubernetes cluster with an active MinIO Operator installation. For instructions on running KES, see the KES docs.

As part of this procedure, you will:

Create or modify a MinIO deployment with support for SSE using KES. Defer to the Deploy Distributed MinIO tutorial for guidance on production-ready MinIO deployments.
Use the MinIO Operator Console to create or manage a MinIO Tenant.
Access the Encryption settings for that tenant and configure SSE using a supported Key Management System.
Create a new EK for use with SSE.
Configure automatic bucket-default SSE-KMS.

This procedure provides guidance for deploying MinIO configured to use KES and enable Server Side Encryption. For instructions on running KES, see the KES docs.

Data Encryption (SSE) on SILO

Server-Side Object Encryption with KES