What is Keyset Manager?
Keyset Manager is a comprehensive authority management tool built directly into KOS Studio that streamlines cryptographic key operations within your development workflow. This powerful feature brings production, delegated, and test authority management capabilities directly to your fingertips without requiring external tools or complex processes.
Key Benefits
- Streamlined Workflow: Manage all authority types directly within KOS Studio
- Enhanced Security: Secure production key handling with built-in safeguards
- Partner Collaboration: Grant delegated authority to third parties and agencies
- Production Readiness: Build production-ready releases without leaving Studio
Core Components of Keyset Manager
Authority Management Framework
Keyset Manager supports KOS’s complete authority ecosystem through three distinct keyset types:
Production Keys provide full production signing authority for creating secure, deployable releases. These keys undergo rigorous security validation and are essential for organizations building production-ready CUIs.
Delegated Keys enable secure authority sharing with trusted third parties, including agencies and partner organizations. This component allows your organization to maintain control while enabling independent development by external teams.
Test Keys support development and testing environments, providing a secure sandbox for CUI development without compromising production security standards.
Delegation Management Interface
The delegation system empowers administrators with comprehensive third-party authority control:
Grant Delegated Authority allows you to securely share signing capabilities with partner organizations, enabling them to develop and release CUIs independently while maintaining your security standards.
View Active Delegations provides complete visibility into all current delegated authorities, showing which organizations have access, when authority was granted, and current usage status.
Revoke Delegated Access ensures you can immediately remove third-party access when partnerships end or security requirements change, maintaining complete control over your authority distribution.
Production Key Request System
The request system streamlines the traditionally complex process of obtaining production keys:
Automated Request Processing handles the entire request workflow from submission to approval, eliminating manual processes and reducing time to production readiness.
Secure Communication Pipeline delivers production keys through encrypted email with phone-based verification codes, ensuring secure delivery even if communication channels are compromised.
Status Tracking and Notifications keeps requestors informed throughout the approval process, providing clear expectations and next steps at every stage.
Local Installation Manager
The installation component ensures secure, device-specific keyset deployment:
Computer-Specific Installation restricts keysets to individual machines, preventing unauthorized distribution while enabling secure production builds on approved devices.
Import Validation System verifies keyset integrity and authenticity during installation, ensuring only legitimate production keys are accepted into your environment.
Secure Removal Capabilities provide clean keyset deletion when devices are decommissioned or security requirements change, maintaining proper key lifecycle management.
How to Access Keyset Manager
Steps:
- Launch KOS Studio and log in
- Navigate to Settings
- Click Keyset Manager
- Tool opens in new window (600×600 default size)
Granting Delegated Authority
When to Use
- Partnering with external agencies or contractors
- Enabling third-party organizations to develop CUIs
- Providing independent development capabilities to trusted partners
Step-by-Step Process
Granting Access
- Access Keyset Manager (see above)
- Navigate to Delegated Authorities section
- Click Grant Delegated Authority
- Enter the authority for the target third-party KOS organization
- Confirm the delegation grant
- Verify the third party can access the delegated keyset
Viewing Existing Delegations
- Open Keyset Manager
- Go to Delegated Authorities view
- Review list of organizations with delegated access
- Check delegation status and permissions
- Monitor usage and activity (if available)
Removing Delegated Access
- Access Delegated Authorities section
- Locate the organization to remove
- Select Remove Delegation option
- Confirm removal action
- Verify access has been revoked
Result: Third-party organizations can independently develop and release CUIs using your delegated authority.
Requesting Production Keysets
When to Use
- Setting up production release capabilities
- Establishing secure deployment processes
- Enabling production-ready builds within Studio
Request Process
Initiating the Request
- Access Keyset Manager
- Navigate to Production Keysets section
- Click Request Production Keys
- Provide Name, email and phone number of the person requesting the keys along with note.
- Submit the production keyset request
What Happens Next
After submitting your request:
- Email Confirmation: You’ll receive an email confirming your request submission
- Processing Notification: Email explains that keysets will be sent shortly
- Security Review: Your request undergoes security validation
- Approval Process: Authorized personnel review and approve the request
Receiving Your Keyset
When approved, you’ll receive:
- Approval Email: Contains the production keyset (.kab file)
- Security Code: Sent separately to your registered phone number
- Setup Instructions: Clear instructions for completing the installation
- Security Guidelines: Best practices for handling production keys
Installing Production Keysets
When to Use
- After receiving approved production keysets
- Setting up new secure development machines
- Installing keysets on specific computers for production builds
Installation Process
Installing the Keyset
- Prepare for Installation:
- Ensure you have the .kab file from your approval email
- Verify you’re on the target secure computer
- Import Process:
- Access Keyset Manager
- Navigate to Production Keysets section
- Click Install Production Keyset
- Select the .kab file from your system
- Complete the installation process
Viewing Installed Keysets
- Open Keyset Manager
- Go to Installed Keysets view
- Review keysets installed on THIS computer
- Check organization associations
- Verify keyset status and validity
Managing Installed Keysets
- Security Maintenance: Regularly audit installed keysets
- Removal Process: Delete keysets when no longer needed
- Documentation: Track which keysets are installed where
Removing Production Keysets
- Access Installed Keysets section
- Select the keyset to remove
- Click Delete Production Keyset
- Confirm removal action
- Verify keyset has been securely deleted
Important Security Notes:
- Keysets are computer-specific installations
- Only install on secure, authorized machines
- Remove keysets when changing device usage
- Follow your organization’s key management policies
Security Best Practices
General Security Guidelines
- Access Control: Only grant admin access to trusted personnel
- Regular Audits: Periodically review all delegated authorities and installed keysets
- Secure Communications: Production keys are delivered via secure email with phone verification
- Device Management: Install production keysets only on authorized, secure computers
Delegated Authority Management
- Regular Review: Audit delegated access quarterly
- Prompt Removal: Remove access immediately when partnerships end
- Documentation: Maintain records of all delegated authorities
Production Key Handling
- Secure Installation: Install only on approved production machines
- Code Protection: Keep security codes confidential and separate from keyset files
- Regular Cleanup: Remove unused keysets promptly
- Backup Procedures: Follow organizational backup and recovery procedures