Release
Vault Fork OpenBao Adds External Keys and Quantum-Ready TLS
InfoQ · By Matt Saunders ·

OpenBao has released version 2.7, adding read scaling for PostgreSQL-backed deployments, support for external hardware security module (HSM) and key management service (KMS) keys, and post-quantum cryptographic algorithms. The release also introduces control groups for human…
The Brief
- OpenBao 2.7 has been released.
- The release adds read scaling for PostgreSQL-backed deployments.
- It adds support for external hardware security module (HSM) and key management service (KMS) keys, plus post-quantum cryptographic algorithms.
Why it matters
Teams running OpenBao can scale reads on PostgreSQL storage, move key handling to external HSM or KMS, and adopt post-quantum TLS options.
Who’s affected
- OpenBao operators
- Teams running OpenBao with PostgreSQL-backed storage
- OpenBao 2.7
- #openbao
- #secrets-management
- #hsm
- #kms
- #post-quantum
- #postgresql



