Jamf Expands Customer-Managed Encryption Keys to Its Frankfurt Cloud Region

Summary
Jamf has launched BYOK for Jamf Pro customers hosted in its Frankfurt cloud region. Customers manage the application-level encryption key through supported key management systems and can revoke Jamf’s access.
Key points
- BYOK is available to new and existing customers hosting Jamf instances in Jamf Cloud’s Frankfurt region, with stated environment exclusions.
- Customers supply and manage application-level encryption keys using Thales CipherTrust Manager, Google Cloud KMS, AWS KMS, or Microsoft Azure Key Vault.
- Revoking Jamf’s access to the key prevents its services from reading or operating on the encrypted data.
- At launch, BYOK covers Jamf Pro and Declarative Device Management data; Jamf says support for additional hosted solutions is planned.
- Organizations hosted elsewhere in Europe or the UK may need to migrate to Frankfurt to use BYOK.
Article Details
- Event Type
- Launch and regional expansion of Bring Your Own Key (BYOK) for Jamf Cloud in Frankfurt, Germany.
- Impact
- Eligible customers can manage the application-level encryption keys for Jamf Pro and Declarative Device Management data hosted in Jamf Cloud. Customers can revoke Jamf’s access to a key, preventing the application from decrypting or operating on the protected data. At launch, BYOK is available to new and existing customers in the Frankfurt datacenter, excluding Jamf Premium Cloud Plus and StateRAMP environments.
Vendors
Amazon Web ServicesAWS Key Management ServiceGoogleGoogle Cloud Key Management ServiceJamfAfter launching Bring Your Own Key (BYOK) in North America, we're now expanding BYOK to Europe, for organizations hosting Jamf Pro in the Jamf Cloud in Frankfurt, Germany.MicrosoftMicrosoft Azure Key VaultThalesThales Ciphertrust Manager
Products
Declarative Device Management (DDM)It currently covers Jamf Pro and Declarative Device Management (DDM) data. At launch, this service is available to protect data in these two portions of the Jamf platform, with expansion to additional Jamf solutionsJamf CloudAfter launching Bring Your Own Key (BYOK) in North America, we're now expanding BYOK to Europe, for organizations hosting Jamf Pro in the Jamf Cloud in Frankfurt, Germany.Jamf ProAfter launching Bring Your Own Key (BYOK) in North America, we're now expanding BYOK to Europe, for organizations hosting Jamf Pro in the Jamf Cloud in Frankfurt, Germany.