Eviden KMS
cosmian.com
What it is
Eviden KMS centralizes encryption and decryption, key management, and certificate management. Its architecture combines key lifecycle management, an encryption oracle, and public key infrastructure. Administrators can generate, store, rotate, distribute, and revoke keys, and set access policies. The product supports FIPS 140-3 mode and KMIP versions 1.0–1.4 and 2.0–2.1 in binary and JSON formats, but implements a targeted subset rather than the entire KMIP standard. Listed integrations include Trustway Proteccio, Crypt2Pay, Utimaco, Nitrokey HSM 2, and SmartCard HSMs; cloud options include Azure BYOK, GCP CSEK and CMEK, AWS BYOK, and AWS Fargate. It also integrates with Google Workspace Client-Side Encryption, Microsoft 365 Double Key Encryption, and several databases. Deployment options include Debian and RPM packages, Windows and macOS installers, and standard or FIPS Docker images. Its web GUI supports client certificates and OIDC token authentication. Pricing is on request, with per-CPU pricing, connectors included, and any number of servers.
Spec sheet
- Purpose
- Eviden KMS centralizes encryption and decryption, key management, and certificate management.Read 30 Sep 2026 · cosmian.com
- Deployment
- The server is available as Debian or RPM packages, Windows and macOS installers, and standard or FIPS Docker images.Read 30 Sep 2026 · docs.cosmian.com
- Compliance
- The KMS supports FIPS 140-3 mode and KMIP versions 1.0–1.4 and 2.0–2.1 in binary and JSON formats.Read 30 Sep 2026 · docs.cosmian.com
- Support
- The technical documentation directs users to chat with the technical team on Discord.Read 30 Sep 2026 · docs.cosmian.com
- Architecture
- The product combines key lifecycle management, an encryption oracle, and public key infrastructure.Read 30 Sep 2026 · docs.cosmian.com
- Cloud integrations
- Cloud integrations include Azure BYOK, GCP CSEK and CMEK, AWS BYOK, and AWS Fargate.Read 30 Sep 2026 · docs.cosmian.com
- Database integrations
- Transparent data encryption integrations include Oracle Database, MongoDB, MySQL Enterprise, Microsoft SQL Server External EKM, and PostgreSQL.Read 30 Sep 2026 · docs.cosmian.com
- Free demo
- The public demo requires no authentication, has no graphical interface, and resets its database every week.Read 30 Sep 2026 · cosmian.com
- HSM support
- Supported HSM integrations include Trustway Proteccio, Crypt2Pay, Utimaco, Nitrokey HSM 2, and SmartCard HSMs.Read 30 Sep 2026 · docs.cosmian.com
- Key lifecycle
- Key lifecycle functions include generation, storage, rotation, distribution, revocation, and access policies.Read 30 Sep 2026 · eviden.com
- Notable limitation
- The KMS does not implement the entire KMIP standard and supports a targeted subset of KMIP 2.1.Read 30 Sep 2026 · docs.staging.cosmian.com
- Performance
- It provides encryption and decryption services at up to millions of operations per second.Read 30 Sep 2026 · docs.cosmian.com
- User interface
- The KMS includes a web GUI supporting client certificates and OIDC token authentication, with customizable branding.Read 30 Sep 2026 · docs.cosmian.com
- Workplace integrations
- Workplace integrations include Google Workspace Client-Side Encryption and Microsoft 365 Double Key Encryption.Read 30 Sep 2026 · docs.cosmian.com
Plans and prices
Strong points and limits
Strong points
- Key lifecycle includes rotation, distribution, and revocation.
- Supports FIPS 140-3 mode.
- Integrates with listed HSMs, clouds, and databases.
- Offers standard and FIPS Docker images.
Limits
- Does not implement the entire KMIP standard.
- Pricing is on request.
- Public demo has no graphical interface.
- Public demo database resets weekly.
Who it suits
Eviden KMS suits organizations managing keys, certificates, and encryption across the listed cloud, workplace, database, and HSM integrations. Its targeted KMIP implementation may matter to teams requiring broader standard coverage.
Verdict
Eviden KMS combines key lifecycle management with a broad set of listed integrations and deployment formats. Confirm that its targeted KMIP subset and on-request pricing fit your requirements.
Where Specifiction places it
- Key Management Software#5 of 257.7