# v1.0.1  - Dec 09, 2025

**Highlights**

* **Google CSE — Smart Key Selection Rules**\
  Improved key selection logic for Google Client-Side Encryption (CSE).\
  Instead of relying on a single default key, Oten KMS now supports dynamic key auto-selection based on configurable rules, enabling greater flexibility and governance control.
* **TEE Integration (Trusted Execution Environment)**\
  Oten KMS now integrates with a Trusted Execution Environment (TEE) to enhance protection for sensitive cryptographic operations, including secure key generation and CMK key wrapping/unwrapping.
* **Key Tag Management**\
  Workspace users can now add and manage tags for keys, making it easier to organize, categorize, and search keys across environments.
* **Workspace Key Policy Settings**\
  Introduced advanced workspace-level key lifecycle policies, allowing administrators to configure automated key rotation, retention periods, and destruction schedules in a consistent and enforceable manner.
* **Enhanced UI/UX for Key Management**\
  Improved overall usability with a more intuitive navigation flow.\
  The Key Listing page now supports more powerful search and filtering capabilities, helping users quickly locate and manage keys at scale.
* **Updated Google CSE Configuration Guidelines**\
  The Google CSE setup documentation has been updated with clearer, step-by-step guidance for integrating Oten Identity Platform (IDP) with Google Workspace CSE.

**Landing Page**

* <https://oten.com/products/kms>

**Version Info**

* v1.0.2 — Platform: Web
