# KMS IAM/Config Encryption

MinIO supports encrypting config, IAM assets with KMS provided keys. If the KMS is not enabled, MinIO will store the config, IAM data as plain text erasure coded in its backend.

## MinIO KMS Quick Start

MinIO supports two ways of encrypting IAM and configuration data.
You can either use KES - together with an external KMS - or, much simpler,

    var button = $(event.relatedTarget);
    var docId = button.data("docid");
    var title = button.data("title");
    var url = button.data("url");

    var $modal = $(this);
    $modal.find(".modal-body #delete-doc-title").text(title);
    $modal.find(".modal-body #delete-doc-url").text(url);
    $modal.find(".modal-footer input#docId").val(docId);
  });

                                                                name="deleteAllWords"
                                                                data-toggle="modal" data-target="#confirmToAllDelete"
                                                                value="<la:message key="labels.design_delete_button" />">

        while (requestTrace != null) {
            Object data = requestTrace.getData();
            if (data instanceof DependencyRequest request) {
                return "dependency resolution for " + request;
            } else if (data instanceof CollectRequest request) {
                return "dependency collection for " + request;
            } else if (data instanceof CollectStepData stepData) {

                    try {
                        final Map<String, Object> data = new HashMap<>();
                        data.put("phase", phase);
                        data.put("status", "start");
                        data.put("message", phaseMessage);
                        if (keywords != null) {
                            data.put("keywords", keywords);
                        }

     *
     * @param config the configuration to use
     * @param fid the file ID of the named pipe
     * @param data the data buffer to send
     * @param off the offset in the data buffer
     * @param len the length of data to send
     */
    public TransTransactNamedPipe(final Configuration config, final int fid, final byte[] data, final int off, final int len) {
        super(config, SMB_COM_TRANSACTION, TRANS_TRANSACT_NAMED_PIPE);

							<span class="status-text"><la:message key="labels.chat_status_ready" /></span>
						</div>
						<div class="d-flex gap-2">
							<button type="button" id="filterToggleBtn" class="btn btn-outline-secondary btn-sm" data-bs-toggle="collapse" data-bs-target="#filterPanel" aria-expanded="false" aria-controls="filterPanel">
								<i class="fa fa-filter" aria-hidden="true"></i>
								<la:message key="labels.chat_filter" />

    public String available;

    /** Search/filter parameter for data configuration sort order. */
    public String sortOrder;

    /** Search/filter parameter for data configuration creator. */
    public String createdBy;

    /** Search/filter parameter for data configuration creation time. */
    public String createdTime;

    /**
     * Send data using RDMA
     *
     * @param data data buffer to send
     * @param region registered memory region for the data
     * @throws IOException if send fails
     */
    public abstract void send(ByteBuffer data, RdmaMemoryRegion region) throws IOException;

    /**
     * Receive data using RDMA
     *
     * @param timeout timeout in milliseconds

	return ARN{TargetID: tid, region: region}
}

// MarshalJSON - encodes to JSON data.
func (tid TargetID) MarshalJSON() ([]byte, error) {
	return json.Marshal(tid.String())
}

// UnmarshalJSON - decodes JSON data.
func (tid *TargetID) UnmarshalJSON(data []byte) error {
	var s string
	if err := json.Unmarshal(data, &s); err != nil {
		return err
	}

	targetID, err := parseTargetID(s)
	if err != nil {