How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

OpenKCM

Open Key Chain Manager (OpenKCM) is a data-encryption key management solution implementing a hierarchical key derivation system, including a customer-managed-key (CMK) layer that gives customers control over the master key. Plugin APIs are defined in Protocol Buffers, and the project includes a KMIP client library. Software; Apache 2.0.

OpenKCM is key management for a cloud that wants customers to hold their own keys. It is part of NeoNephos, a Linux Foundation Europe project.

  • Customer-managed keys - The CMK service carries the application logic for customer control of the master key.
  • Plugin contracts - Keystore, certificate issuer, identity, notification and system-information plugin APIs as Protocol Buffers in plugin-sdk.
  • Speaks KMIP - A Go KMIP client covering KMIP 1.0–1.4.
  • Releases - cmk v0.10.0, 8 October 2026.