KMS (System Mode)

System Mode KMS is a system app where a system administrator (SysAdmin) centrally views and manages the platform's internal system security assets. No domain-administrator KMS app is provided, and personal security assets are managed in IAM My Page.

Managed assets

• Encryption Keys — Resource encryption keys for volumes, kubeconfig, etc.
• Secrets — Internal system secrets such as JWT signing keys and infrastructure credentials
• Certificates — Internal service-to-service (mTLS) certificates

Highlights

• Lookup and state management focused: KMS does not issue assets; it handles storage, lookup, and state control.
• Per-version state management: Keys and secrets have independent state per version, with at most one Active version.
• Audit trail: Every state transition is recorded in the audit log with a reason.

Getting started

• Quick Start — From entering KMS to managing each asset
• How-to — Guides for the dashboard, keys, secrets, and certificates

Related products

• Signum home
• IAM My Page — Manage personal security assets