HyTrust on @PSUStevens Blog

How to Encrypt a VM Using vSphere Encryption

Tue, 19 Oct 2021 06:50:26 -0400

To get started here is what you will need to complete the steps in this post:

A deployed Entrust KeyControl v5.4 cluster (Click this sentence to learn how to do this)
vCenter and ESXi Host(s) running vSphere 7.x or higher
Trusted connection between Entrust KeyControl and vCenter (Click this sentence to learn how to do this)
Powered-off VM

Now, let’s get started…

How to Add KeyControl v5.4 as a Key Provider in VSphere 7

Tue, 12 Oct 2021 08:15:28 -0400

To get started here is what you will need to complete the steps in this post:

A deployed Entrust KeyControl v5.4 cluster (Click this sentence to learn how to do this)
vCenter and ESXi Host(s) running vSphere 7.x

Now, let’s get started…

Enable the KMIP Server in KeyControl

How to Add Another KeyControl Security Admin From Active Directory

Fri, 08 Oct 2021 08:08:04 -0400

To get started here is what you will need to complete the steps in this post:

A deployed Entrust KeyControl v5.4 cluster connected to Active Directory (Click this sentence to learn how to do this)
Active Directory account info to be added

Now, let’s get started…

Add a Second KeyControl Security Administrator from Active Directory

Click Security from the menu bar then click the blue Actions button and select Create User

How to Connect KeyControl 5.4 to Active Directory

Tue, 05 Oct 2021 08:08:40 -0400

To get started here is what you will need to complete the steps in this post:

A deployed Entrust KeyControl v5.4 cluster (Click this sentence to learn how to do this)
Active Directory service account

Now, let’s get started…

Connect KeyControl to Active Directory

How to Deploy Entrust KeyControl 5.4

Fri, 01 Oct 2021 09:45:33 -0400

Around this time last year I wrote about how to deploy a 2-node HyTrust KeyControl cluster. That post covered KeyControl version 5.2.1. You can find that blog post over here.

This post is very similar. The difference between it and the last post is that I will cover Entrust KeyControl version 5.4.. Are you scratching your head about the name change? Head over to this post I wrote about changes that occurred in January of this year where I talk about HyTrust being acquired by Entrust. The full press release can be found here.

Add a HyTrust KMS to vCenter v7 as a Key Provider

Wed, 04 Nov 2020 08:07:16 -0500

Introduction

In my How to Deploy a HyTrust KeyControl 2-node Cluster post I walked through the steps for deploying and configuring a 2-node HyTrust KeyControl cluster. Now that you have it deployed, let’s start using it. But before we can do that, we need to add it vCenter as a Key Provider. Let’s go!!

How to Deploy a HyTrust KeyControl v5.2.1, 2-Node Cluster

Sat, 31 Oct 2020 14:04:12 -0400

To get started here is what you will need to complete the steps in this post:

KeyControl OVA v5.2.1
vCenter and ESX host at least version 6.5 or greater
2 vCPU, 8GB RAM, 60GB disk per KeyControl node
Network address information such as:
- IP address (one per node)
- Subnet mask
- Gateway address
- DNS server information
- DNS registered hostname for each node

Deploy the First HyTrust KeyControl Appliance

Deploy OVF Template...

Click on Upload Files and navigate to the directory where you placed the HyTrust KeyControl OVA, select it, then click Open.

Select OVF Template

Now that you have the HyTrust KeyControl OVA selected, click on Next.

Selected OVF Template

Provide a name for the HyTrust KeyControl appliance, select a deployment location, then click Next.

Select a Name and Folder

Select the vSphere Cluster or host, then click Next.

Select a Compute Resource

Review the details, then click Next.

Review Details

Accept the license agreement, then click Next.

License Agreement

Select the proper configuration from the list, then click Next.

Deployment Size

Select the appropriate storage and disk format for the appliance, then click Next.

Select Storage

Select the appropriate network, then click Next.

Select Network

Provide the required information, then click Next.

Appliance Properties

Review the summary screen. If everything is correct, click Finish.

Review Settings

You have successfully deployed the first HyTrust KeyControl node.