# On-premise KMS

Ripple supports the following on-premise deployments with key-management systems:

* Thales Luna hardware-security module (HSM) — see [Thales Luna HSM](/assets/luna.54619761c0f0dfa21977543f5edb81c4af5fb79bf1e0593c6720006fb7f60d77.b3c38bcc.md).
* IBM HSM — For more information, contact your Ripple liaison.


Initialization and connection of an on-premise KMS involves the following steps:

1. Deploy and initialize the KMS, according the vendor instructions.
2. Deploy a vault.