由于第 3 步中的设置步骤依赖于 KMS，因此现在是时候选择您要使用的可用 KMS：
- Google Cloud KMS
- Amazon KMS
- HashiCorp Vault（目前仅支持 Go 语言）
选择 KMS
如未另行说明，那么本页面中的内容已根据知识共享署名 4.0 许可获得了许可，并且代码示例已根据 Apache 2.0 许可获得了许可。有关详情，请参阅 Google 开发者网站政策。Java 是 Oracle 和/或其关联公司的注册商标。
最后更新时间 (UTC)：2025-07-25。
[null,null,["最后更新时间 (UTC)：2025-07-25。"],[[["\u003cp\u003eYou need to choose a Key Management System (KMS) from Google Cloud KMS, Amazon KMS, or HashiCorp Vault (Go only) before proceeding to step 3.\u003c/p\u003e\n"],["\u003cp\u003eThis KMS selection is crucial as it will be used to create a key encryption key (KEK) in a later step to protect your Tink-generated keys.\u003c/p\u003e\n"],["\u003cp\u003eHashiCorp Vault is currently supported as KMS within the Go Tink library only.\u003c/p\u003e\n"]]],["Users must select a Key Management System (KMS) from the available options: Google Cloud KMS, Amazon KMS, or HashiCorp Vault (Go language only). The chosen KMS will be used in a later step to create a key encryption key (KEK). This KEK will provide protection for Tink-generated keys. The setup steps depend on this KMS selection.\n"],null,["# Select your KMS\n\nAs the setup steps in [step 3](/tink/tink-setup) are KMS-dependent, now is the time\nto select which available KMS you want to use:\n\n- [Google Cloud KMS](https://cloud.google.com/kms/docs/)\n- [Amazon KMS](http://docs.aws.amazon.com/kms/)\n- [HashiCorp Vault](https://developer.hashicorp.com/vault/docs/what-is-vault) (currently only available in Go language)\n\n| **Note:** To protect your Tink-generated keys, you'll create a key encryption key (KEK) in [step 5](/tink/key-management-overview#create_kek), which requires the use of the Key Management System (KMS) selected here."]]