Manage KMS using the GUI
This page describes how to manage the Key Management System (KMS) using the GUI.
Last updated
This page describes how to manage the Key Management System (KMS) using the GUI.
Last updated
Using the GUI, you can:
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
On the Security page, select Configure KMS.
On the Configure KMS dialog, select the KMS type to deploy: HashiCorp Vault or Kmip.
5. Enter the connection properties. The required properties depend on the KMS type you select.
For the HashiCorp Vault type, enter the following:
Address: The KMS address
Key Identifier: The identifier of the KMS.
Token: The API token that you obtain from the vault.
For the Kmip type, enter the following:
Address: The KMS address
KMS Identifier: The identifier of the KMS.
Client Cert and Client Key: The client certificate and key that you obtain for the Kmip-based KMS.
CA Cert: (Optional) A digital certificate from the Certificate Authority (CA).
6. Click Save.
Related topics
Obtain an API token from the vault
Obtain a certificate for a Kmip-based KMS
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Select Update KMS, and update its settings.
5. Select Save.
Removing a KMS configuration is possible only if no encrypted filesystems exist.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Select Reset KMS.
In the message that appears, select Yes to confirm the KMS configuration reset.
