# KMS

> Key Management Service: an external service that stores master encryption keys. Pachca supports Yandex Cloud KMS, Cloud.ru, HashiCorp Vault and Deckhouse Stronghold

Источник: https://pachca.com/en/glossary/kms

A KMS (Key Management Service) is a system for storing and managing cryptographic keys. Supported providers:

- Yandex Cloud KMS
- Cloud.ru (SberCloud)
- HashiCorp Vault
- Deckhouse Stronghold

The KMS holds the master key, which never leaves its secure storage. Pachca asks the KMS to perform cryptographic operations but never receives the key itself.

Learn more in the Help Center

[Read the article →](https://pachca.com/en/help-center/administration/byok)