Deploy KeyControl

Deploy a KeyControl cluster

For this integration, a two-node cluster was deployed as follows:

Download the KeyControl software from Entrust TrustedCare. This software is available as an OVA or ISO image. This guide deploys an OVA installation.
Install KeyControl as described in KeyControl OVA Installation.
Configure the first KeyControl node as described in Configuring the First KeyControl Node (OVA Install).
Add second KeyControl node to cluster as described in Adding a New KeyControl Node to an Existing Cluster (OVA Install).
Both nodes need access to an NTP server, otherwise the above operation will fail.
Sign in to the console to change the default NTP server if required.
Install the KeyControl license as described in Upgrading Your Trial License.

After the KeyControl cluster is deployed, additional system configuration can be done as described in KeyControl System Configuration.

This guide uses local account authentication.

For AD-managed Security groups, configure the LDAP/AD Authentication Server as described in Specifying an LDAP/AD Authentication Server.

This guide uses the individual IP addresses of the KeyControl nodes.

To use hostnames, configure your DNS server giving each node in the KeyControl a unique name.

The KeyControl Vault appliance supports different types of vaults. This section describes how to create a KMIP vault for this integration.

Sign in to the KeyControl Vault Server web user interface using the secroot credentials.
From the user’s dropdown menu, select Vault Management.
Select Create Vault > KMIP, then enter your information.
Select Create Vault, then select Close.

A window with the new vault information appears. In addition, an email with the same vault information is sent to the security administrator secroot.

Example vault information window:

Example email:
Bookmark the Vault URL listed above.

The new vault is added to the Vault Management dashboard.
Sign in to the Vault URL with the temporary password. Change the temporary password when prompted. Sign in again to verify.

Notice the new vault.

For more information, see Creating a Vault.

In the Vault Management dashboard, hover over the vault and select View Details.