Overview

• Make sure your CipherTrust Manager is licensed to allow KMIP access
• Create a domain for each tenant organization
• Register the domain CA with the KMIP service
• Create a domain user that will manage encryption keys
• Create a certificate for the user to authenticate with the KMIP service
• Use the key and certificate for the user to finish configuration of the BYOK service in the VMware Cloud Director Tenant UI

Before getting started, make sure you have CipherTrust running with the correct network configuration and administrator credentials.

UI

See the "BYOK Thales Configuration Guide - UI.pdf" file attached to this page for detailed instructions.

CLI

Configuration

Licensing

You can skip this step if you have already activated your CipherTrust appliance with an official or trial license.

Create a domain

Create a domain user for KMIP access