Encryption at REST, KMIP alternative
Hi,
Currently, for a production Setup of MongoDB EA and Ops Manager, only option to enable Encryption at REST that would cover both the Replica Set and Backups in Ops Manager, is to use 3rd party application that has KMIP engine, which by itself usually is locked behind additional costs with enterprise licensing.
I would like to suggest, that MongoDB could develop either an alternative feature for Encryption at REST which would enable anyone who has MongoDB Enterprise advanced license to have fully functional Encryption at REST for a production environment or A full KMS solution to leverage KMIP capabilities already present in Enterprise versions.
P.S Ofcourse there is currently a local file encryption available, but that is only good for performance testing, and is not a valid option for a production environment, which needs both MongoDB data and backups encrypted at REST.
Kaspars
shared this idea
-
Sami
commented
We are using a lot Azure key vault to store secrets in our infra, I think MongoDB should support also Azure key vault key management option.