KMS database constituents
The KMS database consists of three files:
The keystore file (KMS_DATA) contains all the key group and key records along with some metadata.
The KPK file (KMS_KPKF) contains the KPK that is used to encrypt the ciphertext portions of the key records that are stored in the keystore file.
The HMK file (KMS_HMKF) contains the HMK that is used to encrypt the entire contents of the keystore file. The keystore file header is an exception. It contains some metadata like the KPK ID and HMK ID that is not encrypted).