Manage KMS using the GUI
This page describes how to manage the Key Management System (KMS) using the GUI.
Using the GUI, you can:
Add a KMS
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
On the Security page, select Configure KMS.
On the Configure KMS dialog, select the KMS type to deploy: HashiCorp Vault or Kmip.
5. Enter the connection properties. The required properties depend on the KMS type you select.
For the HashiCorp Vault type, enter the following:
Address: The KMS address
Key Identifier: The identifier of the KMS.
Token: The API token that you obtain from the vault.
For the Kmip type, enter the following:
Address: The KMS address in hostname:port format.
KMS Identifier: The identifier of the KMS.
Client Cert and Client Key: The client certificate and key that you obtain for the Kmip-based KMS.
CA Cert: (Optional) A digital certificate from the Certificate Authority (CA).
6. Click Save.
Related topics
Obtain an API token from the vault
Obtain a certificate for a Kmip-based KMS
View the KMS
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Update the KMS configuration
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Select Update KMS, and update its settings.
5. Select Save.
Remove the KMS
Removing a KMS configuration is possible only if no encrypted filesystems exist.
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
The Security page displays the configured KMS.
Select Reset KMS.
In the message that appears, select Yes to confirm the KMS configuration reset.
Last updated