# On-premise KMS

Ripple supports the following on-premise deployments with key-management systems:

* Thales Luna hardware-security module (HSM) — see [Thales Luna HSM](on-prem/luna.md).
* IBM HSM — For more information, contact your Ripple liaison.


Initialization and connection of an on-premise KMS involves the following steps:

1. Deploy and initialize the KMS, according the vendor instructions.
2. Deploy a vault.