Open Key Chain Manager (OpenKCM) is a data-encryption key management solution implementing a hierarchical key derivation system, including a customer-managed-key (CMK) layer that gives customers control over the master key. Plugin APIs are defined in Protocol Buffers, and the project includes a KMIP client library. Software; Apache 2.0.
OpenKCM
OpenKCM is key management for a cloud that wants customers to hold their own keys. It is part of NeoNephos, a Linux Foundation Europe project.
- Customer-managed keys - The CMK service carries the application logic for customer control of the master key.
- Plugin contracts - Keystore, certificate issuer, identity, notification and system-information plugin APIs as Protocol Buffers in
plugin-sdk. - Speaks KMIP - A Go KMIP client covering KMIP 1.0–1.4.
- Releases - cmk v0.10.0, 8 October 2026.