SAP Knowledge Base Article - Public

3117993 - How to use the "Bring Your Own Key (BYOK)" feature in SAP Analytics Cloud (SAC)


As of wave 2021.20, SAP Analytic Customers are able to Bring Your Own Key (BYOK) to their SAP Analytics Cloud tenant. This feature allows customers to use the SAP Data Custodian key management service (KMS) with SAP Analytics Cloud. Please see


  • Private Edition Tenant of SAP Analytics Cloud (Enterprise) 2021.20


BYOK will only be enabled by customer request. In order to enable this feature you must have an existing SAP Data Custodian KMS tenant, an encryption key, a technical user, credential information for the technical user, and approval from the SAC tenant System Owner.

To create a request, please have the System Owner of the SAC tenant create a product support ticket under the LOD-ANA-ADM component or, if this is not possible, include documented approval requesting the enablement of BYOK by the System Owner of the SAC tenant. In the support ticket please make sure to provide us with your tenant url Information and attach the encryption key id. In the Logon Depot under the SAC Tenant installation a .zip file must also be uploaded that contains technical user credentials including api key, api endpoint, and secret key.

Please note that the enablement of BYOK needs to be done during a weekend maintenance window so the completion of this activity might take weeks to align with the next appropriate weekend.

See Also

Your feedback is important to help us improve our knowledge base.


SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC, sap analyst cloud, connected, failure, stopped , KBA , LOD-ANA-DES , Story Design & Visualizations , Problem


SAP Analytics Cloud 1.0