This figure describes the Key Vault deployment architecture.

• In the center is the Key Vault Software Appliance connected to components on the left and the right.

• On the left are the following endpoint components reading from the top down:

  • Endpoint okvutil utility for backup and restore operations for credential files and wallets

  • Endpoint library, with the PKCS#11 library using a direct connection with KMIP for TDE

  • Endpoint, a third-party KMIP client

  All three endpoint components are connected to the Key Vault software appliance (Primary), through KMIP over Transport Layer Security (TLS)

• On the right are the following three components reading from the top down:

  • The browser-based Key Vault management console connected to Key Vault over HTTPS

  • Standby Oracle Key Vault Appliance (Failover), through Data Guard over TLS

  • Remote Backup Location, through a secure copy protocol (SCP) connection