Manage KMS using the GUI

This page describes how to manage the Key Management System (KMS) using the GUI.

Using the GUI, you can:

• Add a KMS

• View the KMS

• Update the KMS configuration

• Remove the KMS

Add a KMS

Procedure

1. From the menu, select Configure > Cluster Settings.

2. From the left pane, select Security.

3. On the Security page, select Configure KMS.

4. On the Configure KMS dialog, select the KMS type to deploy: HashiCorp Vault or Kmip.

Configure KMS of HashiCorp Vault type

Configure KMS of Kmpi type

5. Enter the connection properties. The required properties depend on the KMS type you select.

For the HashiCorp Vault type, enter the following:

• Address: The KMS address

• Key Identifier: The identifier of the KMS.

• Token: The API token that you obtain from the vault.

For the Kmip type, enter the following:

• Address: The KMS address in hostname:port format.

• KMS Identifier: The identifier of the KMS.

• Client Cert and Client Key: The client certificate and key that you obtain for the Kmip-based KMS.

• CA Cert: (Optional) A digital certificate from the Certificate Authority (CA).

6. Click Save.

Related topics

Obtain an API token from the vault

Obtain a certificate for a Kmip-based KMS

View the KMS

Procedure

1. From the menu, select Configure > Cluster Settings.

2. From the left pane, select Security.

3. The Security page displays the configured KMS.

View the configured KMS

Update the KMS configuration

Procedure

1. From the menu, select Configure > Cluster Settings.

2. From the left pane, select Security.

3. The Security page displays the configured KMS.

4. Select Update KMS, and update its settings.

Update the KMS

5. Select Save.

Remove the KMS

Removing a KMS configuration is possible only if no encrypted filesystems exist.

Procedure

1. From the menu, select Configure > Cluster Settings.

2. From the left pane, select Security.

3. The Security page displays the configured KMS.

4. Select Reset KMS.

5. In the message that appears, select Yes to confirm the KMS configuration reset.