# 5. HI GIO KMS Service

## <mark style="color:green;">**Overview**</mark> <a href="#overview" id="overview"></a>

**HI GIO KMS** is powered by the HashiCorp Vault solution, which is fully managed by HI GIO teams. Thus, the customer can focus on key management itself.

{% hint style="info" %}
**HashiCorp Vault** is an identity-based secrets and encryption management system. A *secret* is anything you want to control access to tightly, such as API encryption keys, passwords, and certificates. Vault provides encryption services that are gated by authentication and authorization methods. Access to secrets and other sensitive data can be securely stored and managed, tightly controlled (restricted), and auditable using Vault's UI, CLI, or HTTP API.
{% endhint %}

HI GIO KMS has two kinds of deployment models.

* Internet mode
* Private mode (Only can access from customer’s HI GIO VPC system)

<figure><img src="/files/hjgHLqgJwu9II37JpfRI" alt=""><figcaption></figcaption></figure>

&#x20;

Reference:

[![](https://developer.hashicorp.com/favicon.ico)Tutorials | Vault | HashiCorp Developer](https://developer.hashicorp.com/vault/tutorials)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.higiocloud.vn/compute/5.-hi-gio-kms-service.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.