> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/docs/platform/security-and-identity/zuora-protect-data-encryption/enable-zuora-protect-platform-encryption-for-your-organization/follow-the-steps-mentioned-below-to-connect-with-an-external-key-store/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Bring your own keys

> Learn how to connect and integrate your external AWS key store with Zuora to manage encryption keys.

Learn how to connect and integrate your external AWS key store with Zuora to manage encryption keys.

You can connect with your external AWS key store and import keys from your key store to encrypt your data. Follow the steps mentioned below to connect with an external key store:

In OneID, navigate to **Admin console > Encryption Key Management** in the left-hand navigation section.

On the **External Key Store** page, click **Connect External Key Store**.

Add the following values to integrate your external AWS Key Store with Zuora:

* Key Store Name
* Region
* Access Key ID
* Key Secret

Click **Save**.

Once the connection has been established, your external store will be listed in the External Key Store section.

> **Note**
>
> ith Zuora Protect platform encryption, you can only encrypt standard fields on standard objects. We recommend you encrypt the least number of fields possible, for best results.

> Learn how to connect and integrate your external AWS key store with Zuora to manage encryption keys.

## Docs

- [Import encryption keys](https://zuora.ferndocs.com/docs/platform/security-and-identity/zuora-protect-data-encryption/enable-zuora-protect-platform-encryption-for-your-organization/follow-the-steps-mentioned-below-to-connect-with-an-external-key-store/import-encryption-keys.md): Learn how to import encryption keys from your external key store into Zuora.