Jamf Expands Customer-Managed Encryption Keys to Its Frankfurt Cloud Region

· Original article ↗

Summary

Jamf has launched BYOK for Jamf Pro customers hosted in its Frankfurt cloud region. Customers manage the application-level encryption key through supported key management systems and can revoke Jamf’s access.

Key points

  • BYOK is available to new and existing customers hosting Jamf instances in Jamf Cloud’s Frankfurt region, with stated environment exclusions.
  • Customers supply and manage application-level encryption keys using Thales CipherTrust Manager, Google Cloud KMS, AWS KMS, or Microsoft Azure Key Vault.
  • Revoking Jamf’s access to the key prevents its services from reading or operating on the encrypted data.
  • At launch, BYOK covers Jamf Pro and Declarative Device Management data; Jamf says support for additional hosted solutions is planned.
  • Organizations hosted elsewhere in Europe or the UK may need to migrate to Frankfurt to use BYOK.

Article Details

Event Type
Launch and regional expansion of Bring Your Own Key (BYOK) for Jamf Cloud in Frankfurt, Germany.
Impact
Eligible customers can manage the application-level encryption keys for Jamf Pro and Declarative Device Management data hosted in Jamf Cloud. Customers can revoke Jamf’s access to a key, preventing the application from decrypting or operating on the protected data. At launch, BYOK is available to new and existing customers in the Frankfurt datacenter, excluding Jamf Premium Cloud Plus and StateRAMP environments.

Vendors

Products

Countries

Related Articles