Randtronics DPM easyKey is a software-based enterprise key management application that provides policy-controlled, full-lifecycle management for encryption keys and digital certificates across multiple platforms. Key Management Lifecycle: The application handles the complete lifecycle of encryption keys — including generation, distribution, storage, backup/recovery, revocation, and destruction — using templates and policy automation to standardize and simplify operations. Architecture: DPM easyKey is accessed via a web browser-based interface for administrators. It exposes a KMIP 1.1-compliant RESTful API for client application integration. Keys can be generated and stored internally within the software or offloaded to optionally connected HSM hardware or CloudHSM. Security Controls: - Access control for users and client applications - Dual control configuration requiring two administrators to activate significant operations - Separation of duties to isolate key management responsibilities - Enforced TLS/SSL for key distribution - FIPS 140-3 Level 3/4 and Common Criteria EAL4+/5+ assurance via HSM hardware - Full audit logging of all key management and usage activities Key Support: Supports all symmetric and asymmetric key types, as well as digital certificates. Supported Environments: Runs on Windows Server 2019+, RedHat Linux, CentOS, Oracle Linux, and Ubuntu. Supports backend databases including Microsoft SQL Server 2019+, Oracle MySQL 8.0, and MariaDB. Client Interfaces: Supports file encryption key connectors for Windows and Linux, RESTful/SOAP/web service APIs, database connectors for MS SQL Server and Oracle, multi-vendor HSMs, and Microsoft Azure Key Vault.