> ## Documentation Index > The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt > Use these files to discover more information as needed. # IBM Cloud Hyper Protect Crypto Services docs Find useful information about Hyper Protect Crypto Services. ## Get started - Getting started - [Getting started with IBM Cloud Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-get-started&format=markdown) - [Deprecation](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-deprecation&format=markdown) - [Video: Initializing Hyper Protect Crypto Services with IBM Cloud TKE CLI](https://mediacenter.ibm.com/media/1_47xngxvg) - [Video: Initializing Hyper Protect Crypto Services with smart cards](https://mediacenter.ibm.com/media/1_lo2fmwbb) - Understanding Hyper Protect Crypto Services Standard Plan - [Video: IBM Cloud Hyper Protect Crypto Services overview](https://mediacenter.ibm.com/media/1_zxwh6ixm) - [Overview - Standard Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-overview&format=markdown) - [Service architecture - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-architecture-workload-isolation&format=markdown) - [Use cases - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-use-cases&format=markdown) - [Components and concepts - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-understand-concepts&format=markdown) - About service instance initialization - Standard Plan - [Initializing your service instance - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-service&format=markdown) - [Introducing service instance initialization approaches - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialize-instance-mode&format=markdown) - About key management service - Standard Plan - [Bringing your encryption keys to the cloud - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-importing-keys&format=markdown) - [Protecting your data with envelope encryption - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-envelope-encryption&format=markdown) - [Monitoring the lifecycle of encryption keys - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-key-states&format=markdown) - About cloud hardware security module - Standard Plan - [Introducing cloud HSM - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-cloud-hsm&format=markdown) - [Introducing PKCS #11 - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-pkcs11-intro&format=markdown) - [Introducing EP11 over gRPC - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-grep11-intro&format=markdown) - About key rotation - Standard Plan - [Master key rotation - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-master-key-rotation-intro&format=markdown) - [Root key rotation - Standard Plan ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-root-key-rotation-intro&format=markdown) - About Bring Your Own HSM - Standard Plan - [Introducing Bring Your Own HSM](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-bring-your-own-hsm&format=markdown) - Understanding Hyper Protect Crypto Services with Unified Key Orchestrator Plan - [Overview - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-overview&format=markdown) - [Service architecture - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-architecture-workload-isolation&format=markdown) - [Use cases - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-use-cases&format=markdown) - [Components and concepts](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-understand-concepts&format=markdown) - About service instance initialization - Unified Key Orchestrator Plan - [Initializing your service instance - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-introduce-service&format=markdown) - [Introducing service instance initialization approaches - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-initialize-instance-mode&format=markdown) - About Unified Key Orchestrator - [Introducing Unified Key Orchestrator](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-uko&format=markdown) - [Monitoring the lifecycle of encryption keys in Unified Key Orchestrator](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-key-states&format=markdown) - About cloud hardware security module - Unified Key Orchestrator Plan - [Introducing cloud HSM - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-introduce-cloud-hsm&format=markdown) - [Introducing PKCS #11 - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-pkcs11-intro&format=markdown) - [Introducing EP11 over gRPC - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-grep11-intro&format=markdown) - About key rotation - Unified Key Orchestrator Plan - [Master key rotation - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-master-key-rotation-intro&format=markdown) - [Managed key rotation](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-managed-key-rotation-intro&format=markdown) - [Managing regulated workloads with Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-regulated-workloads&format=markdown) - [Integrating IBM Cloud services with Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-integrate-services&format=markdown) - [Security and compliance ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-security-and-compliance&format=markdown) - [Release notes](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-what-new&format=markdown) ## Tutorials - Tutorials on key management service - [Creating and importing encryption keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-import-keys&format=markdown) - [Configuring KMIP for key management and distribution in Hyper Protect Crypto Services Standard Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-kmip-vmware&format=markdown) - [Applying end to end security to a cloud application](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-cloud-e2e-security&format=markdown) - [Encrypting Kubernetes secrets with IBM Cloud Hyper Protect Crypto Services](https://developer.ibm.com/tutorials/encrypt-kubernetes-secrets-with-hyper-protect-crypto-services/) - [Protecting LUKS encryption keys with IBM Cloud Hyper Protect Crypto Services and IBM Key Protect](https://developer.ibm.com/tutorials/protect-luks-encryption-keys-with-ibm-cloud-hyper-protect-crypto-services/) - Tutorials on cloud hardware security module - [Using Hyper Protect Crypto Services PKCS #11 for Oracle Transparent Database Encryption](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-tde-pkcs11&format=markdown) - [Using Hyper Protect Crypto Services PKCS #11 for IBM Db2 native encryption](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-db2-pkcs11&format=markdown) - [Integrate Enterprise HashiCorp Vault with IBM Cloud Hyper Protect Crypto Services](https://developer.ibm.com/tutorials/integrate-enterprise-vault-ibm-cloud-hyper-protect-crypto-services/) - [Using IBM Cloud Hyper Protect Crypto Services to offload NGINX TLS](https://developer.ibm.com/tutorials/use-hyper-protect-crypto-services-to-offload-nginx-tls/) - Tutorials on Unified Key Orchestrator - [Securely Managing AWS S3 encryption keys using Hyper Protect Crypto Services with Unified Key Orchestrator](https://developer.ibm.com/tutorials/securely-manage-aws-s3-encryption-keys-with-ibm-cloud-hyper-protect-crypto-services-with-unified-key-orchestrator/) - [Manage regulatory compliance of company data in Microsoft 365 with Hyper Protect Unified Key Orchestrator](https://developer.ibm.com/tutorials/manage-regulatory-compliance-of-company-data-in-microsoft-office-365-in-azure/) - Tutorials on Bring Your Own HSM - [Managing your keys with BYOHSM in IBM Cloud Hyper Protect Crypto Services ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-byohsm&format=markdown) - [Migration Guide for IBM Cloud Hyper Protect Crypto Services with Unified Key Orchestrator ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-migration-guide&format=markdown) ## How to - [Provisioning service instances](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-provision&format=markdown) - [Migrating Hyper Protect Crypto Services (HPCS) to Confidential Computing Container Runtime (CCRT) ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-migrate-hpcs-to-CCRT&format=markdown) - Initializing service instances - [Before you begin](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialize-hsm-prerequisite&format=markdown) - Initializing service instances using smart cards and the Management Utilities - [Setting up smart cards and the Management Utilities](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-prepare-management-utilities&format=markdown) - [Initializing service instances with smart cards and the Management Utilities](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialize-hsm-management-utilities&format=markdown) - [Initializing service instances using recovery crypto units](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialize-hsm-recovery-crypto-unit&format=markdown) - [Initializing service instances using key part files](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialize-hsm&format=markdown) - [Using a signing service to manage signature keys for instance initialization](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-signing-service-signature-key&format=markdown) - [Retrieving an access token](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-retrieve-access-token&format=markdown) - [Retrieving your instance ID](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-retrieve-instance-ID&format=markdown) - Setting up API calls - [Managing your keys with the key management service API](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-up-kms-api&format=markdown) - [Setting up Unified Key Orchestrator API calls - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-up-uko-api&format=markdown) - [Performing cryptographic operations with the PKCS #11 API](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-up-pkcs-api&format=markdown) - [Performing cryptographic operations with the GREP11 API](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-up-grep11-api&format=markdown) - [Enabling the second layer of authentication for EP11 connections - Standard Plan only](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-enable-authentication-ep11&format=markdown) - [Performing key management operations with the CLI - Standard Plan only](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-up-cli&format=markdown) - Setting up Terraform - [Setting up Terraform for Hyper Protect Crypto Services Standard Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-terraform-setup-for-hpcs&format=markdown) - [Setting up Terraform for Hyper Protect Crypto Services with Unified Key Orchestrator](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-terraform-setup-for-hpcs&format=markdown) - [Setting up BYOHSM](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-deploy-hsm-for-byohsm&format=markdown) - Managing keys, keystores, and KMIP adapters - Standard Plan - Managing instance policies - Standard Plan - [Managing the network access policy](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-managing-network-access-policies&format=markdown) - [Managing dual authorization of your service instance](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-dual-auth&format=markdown) - [Managing the key create and import access policy](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-keyCreateImportAccess&format=markdown) - Managing key management service keys - Standard Plan - [Creating root keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-root-keys&format=markdown) - [Creating standard keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-standard-keys&format=markdown) - [Managing key rings](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-managing-key-rings&format=markdown) - [Managing key aliases](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-key-alias&format=markdown) - [Importing root keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-import-root-keys&format=markdown) - [Importing standard keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-import-standard-keys&format=markdown) - [Creating import tokens](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-import-tokens&format=markdown) - [Viewing a list of root keys or standard keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-view-keys&format=markdown) - [Viewing details about a root key or a standard key](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-view-key-details&format=markdown) - [Retrieving a root key or a standard key](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-retrieve-key&format=markdown) - [Wrapping data encryption keys with root keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-wrap-keys&format=markdown) - [Unwrapping data encryption keys with root keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-unwrap-keys&format=markdown) - [Rewrapping data encryption keys with root keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-rewrap-keys&format=markdown) - [Rotating root keys based on the rotation policy](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-rotation-policy&format=markdown) - [Rotating root keys manually](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-rotate-keys&format=markdown) - [Viewing root key versions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-view-key-versions&format=markdown) - [Disabling root keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-disable-keys&format=markdown) - [About deleting and purging keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-purge-keys&format=markdown) - [Deleting keys by using a single authorization](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-keys&format=markdown) - [Deleting keys by using dual authorization](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-dual-auth-keys&format=markdown) - [Setting dual authorization policies for keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-dual-auth-key-policy&format=markdown) - [Purging keys manually](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-purge-keys&format=markdown) - [Restoring keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-restore-keys&format=markdown) - [Viewing associations between root keys and encrypted IBM Cloud resources](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-view-protected-resources&format=markdown) - [Synchronizing associated resources](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-sync-associated-resources&format=markdown) - Managing EP11 keys, keystores, and certificates - Standard Plan - [Managing EP11 keystores with the UI](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-ep11-keystores-ui&format=markdown) - [Managing EP11 keys with the UI](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-ep11-key-ui&format=markdown) - [Managing EP11 certificates with the UI](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-ep11-certificate-ui&format=markdown) - Managing keys and keystores - Unified Key Orchestrator Plan - Managing vaults - Unified Key Orchestrator Plan - [Creating vaults](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-vaults&format=markdown) - [Editing vault details](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-edit-vaults&format=markdown) - [Deleting vaults](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-vaults&format=markdown) - Managing key templates - Unified Key Orchestrator Plan - [Creating key templates](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-template&format=markdown) - [Viewing a list of key templates](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-view-key-template&format=markdown) - [Editing key template details](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-edit-template&format=markdown) - [Archiving and unarchiving key templates](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-archive-template&format=markdown) - [Deleting key templates](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-template&format=markdown) - Managing keys - Unified Key Orchestrator Plan - [Creating managed keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-managed-keys&format=markdown) - [Viewing a list of managed keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-view-key-list&format=markdown) - [Filtering and searching managed keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-search-key-list&format=markdown) - [Editing managed key details](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-edit-kms-keys&format=markdown) - [Rotating managed keys manually](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-rotate-keys&format=markdown) - [Syncing keys in keystores with managed keys manually](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-sync-keys&format=markdown) - [Realigning managed keys with key templates](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-align-key&format=markdown) - [Viewing managed key versions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-view-key-versions&format=markdown) - [Deleting managed keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-managed-keys&format=markdown) - Managing keystores - Unified Key Orchestrator Plan - [Creating internal KMS keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-internal-keystores&format=markdown) - [Connecting to external keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-connect-external-keystores&format=markdown) - [Editing internal keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-edit-internal-keystores&format=markdown) - [Editing connection to external keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-edit-external-keystore-connection&format=markdown) - [Deleting internal keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-internal-keystores&format=markdown) - [Disconnecting from external keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-disconnect-external-keystores&format=markdown) - [Connecting to Azure Key Vault through private endpoint](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-connect-azure-key-vault-private-endpoint&format=markdown) - Managing master keys - [Rotating master keys by using smart cards and the Management Utilities](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-rotate-master-key-smart-cards&format=markdown) - [Rotating master keys by using recovery crypto units](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-rotate-master-key-cli-recovery-crypto-unit&format=markdown) - [Rotating master keys by using key part files](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-rotate-master-key-cli-key-part&format=markdown) - [Recovering a master key from a recovery crypto unit](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-recover-master-key-recovery-crypto-unit&format=markdown) - [Enabling crypto mechanisms](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-enable-mechanisms&format=markdown) - [Adding or removing crypto units](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-add-remove-crypto-units&format=markdown) - [Enabling or adding failover crypto units after you provision a service instance](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-enable-add-failover&format=markdown) - [Deleting service instances](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-instance&format=markdown) - [Restoring your data from another region](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-restore-data&format=markdown) - Enhancing security - Standard Plan - [Managing user access](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-access&format=markdown) - [Granting access to keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-grant-access-keys&format=markdown) - Granting users access to manage EP11 keystores and keys - [Granting users access to manage EP11 keystores and keys through UI](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-grant-pkcs11-ui-access&format=markdown) - [Setting up PKCS #11 API user types](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-best-practice-pkcs11-access&format=markdown) - Privately connecting to Hyper Protect Crypto Services - [Using virtual private endpoints for VPC to privately connect to Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-virtual-private-endpoints-for-vpc&format=markdown) - [Using service endpoints to privately connect to Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-secure-connection&format=markdown) - [Auditing events for Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-at-events&format=markdown) - [Managing security and compliance with Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-security-compliance&format=markdown) - Enhancing security - Unified Key Orchestrator Plan - [Managing user access](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-manage-access&format=markdown) - [Granting access to vaults](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-grant-access-vaults&format=markdown) - [Setting up custom roles for Unified Key Orchestrator ](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-role-best-practices&format=markdown) - [Protecting Hyper Protect Crypto Services resources with context-based restrictions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-cbr&format=markdown) - [Auditing events for Hyper Protect Crypto Services with Unified Key Orchestrator](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-at-events&format=markdown) - Logging and monitoring - [Managing metrics](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-manage-monitoring-metrics&format=markdown) - [Monitoring operational metrics](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-operational-metrics&format=markdown) ## Reference - API reference - Key management service API - [Hyper Protect Crypto Services key management service API change log](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-kms-api-change-log&format=markdown) - [Key management service API reference](https://{DomainName}/apidocs/hs-crypto) - Unified Key Orchestrator API - [Hyper Protect Crypto Services Unified Key Orchestrator API change log](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-api-change-log&format=markdown) - [Unified Key Orchestrator API reference](https://{DomainName}/apidocs/uko) - [Cryptographic operations: PKCS #11 API](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-pkcs11-api-ref&format=markdown) - [Cryptographic operations: GREP11 API](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-grep11-api-ref&format=markdown) - CLI reference - [Hyper Protect Crypto Services CLI change log](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-cli-change-log&format=markdown) - [IBM Cloud Hyper Protect Crypto Services CLI](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-hpcs-cli-plugin&format=markdown) - Terraform reference - [Provisioning and initializing service instances with Terraform](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/resources/hpcs) - [Managing keys with Terraform - Key management service](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/resources/kms_key) - [Managing keys with Terraform - Unified Key Orchestrator](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/resources/hpcs_managed_key) - [Regions and locations](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-regions&format=markdown) - [Service dependency map for IBM Cloud Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-service-dependencies&format=markdown) - [Hyper Protect Crypto Services cloud TKE procedures](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tke-procedures&format=markdown) - [Security considerations for initializing a service instance](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-initialization-security-policy&format=markdown) - [Understanding your responsibilities when using IBM Cloud Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-shared-responsibilities&format=markdown) - [Data portability for Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-oncloud&format=markdown) - [High availability and disaster recovery](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-ha-dr&format=markdown) - [Open-source licenses](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-open-source-licenses&format=markdown) - [Resource links](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-resources&format=markdown) ## Help - FAQs - [General FAQs](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-basics&format=markdown) - [FAQs: Pricing](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-pricing&format=markdown) - [FAQs: Provisioning and operations](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-provisioning-operations&format=markdown) - [FAQs: Hyper Protect Crypto Services Standard Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-performance-capacity&format=markdown) - [FAQs: Hyper Protect Crypto Services with Unified Key Orchestrator](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-uko&format=markdown) - [FAQs: Security and compliance](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-security-compliance&format=markdown) - [FAQs: High availability and disaster recovery](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-ha-dr&format=markdown) - [FAQs: Support and maintenance](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faq-support-maintenance&format=markdown) - [FAQs: Deprecation of IBM Cloud Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-faqs-deprecation-of-ibm-cloud-hyper-protect-crypto-services&format=markdown) - Troubleshooting key management service - [Why am I not authorized to make key management service API request?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-authenticate-api&format=markdown) - [Why am I receiving a CKR_IBM_WK_NOT_INITIALIZED error when I use CLI or API?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-error-CLI-API&format=markdown) - [Why can't I create a standard key after I load another master key?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-create-standard-keys&format=markdown) - [Why can't I create or import keys?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-create-keys&format=markdown) - [Why can't I delete an initialized service instance?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-delete-instance&format=markdown) - [Why can't I delete keys?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-delete-keys&format=markdown) - [Why can't I perform any actions by using the UI?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-ui-session-timeout&format=markdown) - [Why can't I rotate root keys?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-rotate-root-keys&format=markdown) - [Why can't I view or list keys?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-list-keys-api&format=markdown) - [Why can't I view or list specific keys?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-list-specific-keys&format=markdown) - Troubleshooting master key rotation - [Why can't I rotate master keys by using key part files?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-master-key-rotation-key-part-files&format=markdown) - [Why can't I rotate master keys by using recovery crypto units?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-master-key-rotation-recovery-crypto-units&format=markdown) - [Why can't I rotate master keys by using smart cards?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-master-key-rotation-key-smart-cards&format=markdown) - [Why do I fail to load the new master key during the master key rotation process?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-master-key-rotation&format=markdown) - Troubleshooting smart cards and the Management Utilities - [Why am I not authorized when I start the Trusted Key Entry application?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unauthorized-token-tke-application&format=markdown) - [Why am I receiving a blocked PIN on EP11 smart card error?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-block-smart-card&format=markdown) - [Why am I receiving a no smart card readers found error when I use the Management Utilities?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-no-smart-card&format=markdown) - Troubleshooting Trusted Key Entry - [Why am I not authorized when running TKE CLI plug-in commands?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unauthorized-token&format=markdown) - [Why can't I change signature thresholds?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-unable-to-change-signature-thresholds&format=markdown) - [Why can't I list crypto units?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-list-crypto-units&format=markdown) - Troubleshooting Unified Key Orchestrator - [Why can't I delete internal keystores?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-troubleshoot-delete-keystore&format=markdown) - [Getting help and support for Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-getting-help&format=markdown) - [Site map](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-sitemap&format=markdown)