Manage KMS using the GUI
Explore procedures for managing Key Management System (KMS) integration with the WEKA system using the GUI.
Explore procedures for managing Key Management System (KMS) integration with the WEKA system using the GUI.
Using the GUI, you can:
Configure the KMS of either HashiCorp Vault or KMIP within the WEKA system to encrypt filesystem keys securely.
Before you begin
Ensure that the KMS is preconfigured, and both the key and a valid token are readily available.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
On the Security page, select Configure KMS.
On the Configure KMS dialog, select the KMS type to deploy: HashiCorp Vault or KMIP.
Set the connection properties according to the selected KMS type. Select the relevant tab for details:
For the HashiCorp Vault type, set the following:
Address: The KMS address.
Key Identifier: Key name to secure the filesystem keys (encryption-as-a-service).
Token: The authentication API token you obtain from the vault to access the KMS.
Namespace: The namespace name that identifies the logical partition within the vault. It is used to organize and isolate data, policies, and configurations. Namespace names must not end with "/", avoid spaces, and refrain from using reserved names like root
, sys
, audit
, auth
, cubbyhole
, and identity
.
Click Save.
Related topics
Obtain an API token from the vault
Obtain a certificate for a KMIP-based KMS
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security. The Security page displays the configured KMS.
Update the KMS configuration in the WEKA system when changes occur in the KMS server details or cryptographic keys, ensuring seamless integration and continued secure filesystem key encryption.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Select Update KMS, and update its settings.
Select Save.
Removing a KMS configuration is possible only if no encrypted filesystems exist.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Select Reset KMS.
In the message that appears, select Yes to confirm the KMS configuration reset.