Image okvag_vm_004.png shows the following components, from left to right, top to bottom:

- On the left, from top to bottom, are the following:

  - Endpoint okvutil utility for backup and restore operations for credential files and wallets

  - Endpoint library, with the PKCS#11 library using a direct connection with KMIP for TDE

  - Endpoint, a third-party KMIP client

  All three are connected to the center icon, the Key Vault software appliance (primary), through KMIP over Transport Layer Security (TLS)

- Key Vault Software Appliance (Primary), which connects to the next three components, which are listed from top to bottom:

  - The Key Vault management console, through an HTTPS connection

  - Oracle Key Vault Appliance (Failover), through Data Guard over TLS

  - Remote Backup Location, through a secure copy protocol (SCP) connection