Install and configure Entrust KeyControl

A two-node cluster was deployed for this integration.

KeyControl can be deployed on AHV using the ISO image. The ISO image is available at Software Downloads. Installation instructions are available at ISO Installation

Upload the KeyControl ISO in AHV

For reference, see Create a VM in the Nutanix online documentation.

Log into the Nutanix Prism Element web UI.
Select the Settings control on the top tool bar.
In the left menu, select Image Configuration.
Select Upload Image.
Enter Create Image information:
- For Name, enter a unique name. For example, ISO-Entrust-KeyControl-10.1.1.
- For Image Type, select ISO.
- For Storage Container, select the required container.
- Select Upload a file, browse to the ISO file and select it for use.
Select Save.
On the Image Configuration page, confirm that the image is ACTIVE.

For reference, see Configuring Images in the Nutanix online documentation.

Deploy an KeyControl node on AHV

Log in to the Nutanix Prism Element webUI.
Select VM from the pull-down menu on the top tool bar.
Select the Table tab.
Select Create VM.
Under General Configuration information:
- For Name, enter a unique name for the VM.
- For Timezone, select your timezone.
- Clear Use this VM as an agent VM.
Under Compute Details information:
- For vCPUs, enter 2.
- For Memory, select 8.
Under Boot Configuration information:
- Select Legacy BIOS.
- Under Disks, select the edit button for the CD-ROM entry.
In the Update Disk dialog:
- For Operation, select Clone from Image Service.
- For Bus Type, select SATA.
- For Image, enter the ISO file name.
Select Update.
Select Add New Disk.
In the Add Disk dialog:
- For Operation, select Allocate on Storage Container.
- For Bus Type, select SCSI.
- For Storage Container, select the required service container.
- For Size, select 200.
- For Index, select Next Available.
Select Add.
Under Network Adapters (NIC), select Add New NIC.
In the Create NIC dialog, select your Subnet Name and select Add.
At the bottom of the Create VM dialog, select Save to save the VM.
On the VM page, confirm that the VM is created.
Select Power on to start the VM.
Repeat all steps to create a second node.

Join the two KeyControl nodes to form a cluster.

Join the two KeyControl nodes in a high availability cluster following the instructions Installing a New KeyControl Vault Cluster Additional information can be found at Entrust Documentation (search for the KeyControl).

Create an KeyControl vault

Sign in to the KeyControl Appliance Manager.
In the Appliance Management home page select Vault Management.
In the Vault Management home page, select Create Vault. The Create Vault dialog appears.
In the Type drop-down box, select KMIP. Enter the required information, then select Create Vault.
Bookmark the following URL and save the credentials. You will receive an email with the above information if the SMTP was set.
Sign in to the URL provided above with the temporary password. Change the initial password when prompted. Sign in again to verify.
Notice the new vault.