Fortanix does not have access to customer keys. The keys, including the key material and the related metadata, are encrypted both in use and at rest using an encryption key which is derived by the Fortanix Data Security Manager process and the Intel® SGX processor, and is unknown to Fortanix.