Google Cloud Deployment

You can deploy a CipherTrust Manager instance in Google Cloud.

Minimum Requirements

To deploy a CipherTrust Manager instance, the following minimum requirements apply:

• System volume: 50 GB for evaluation, 100 GB for production

• Memory: 16 GB

• vCPUs: 2

• NICs: 1

Deploying in Google Cloud

This section provides the steps for deploying a Virtual CipherTrust Manager k170v instance in Google Cloud. Refer to the Google Cloud Platform documentation for general information on launching a VM in Google Cloud.

Prerequisites

• CipherTrust Manager Image for Google Cloud.

• If using a Windows client, use PuTTY or similar utility to SSH to your k170v instance as KeySecure Administrator (ksadmin).

  If needed, use PuTTYgen or similar utility to format the SSH Key Pair.

• If using a Linux client use SSH to login as KeySecure Administrator (ksadmin).

To launch a CipherTrust Manager k170v instance:

1. Using your gmail address, sign in to the Google Cloud Platform

2. In the Google Cloud Platform top banner, select a project or create a new one.

   

   To create a New Project:

   1. Select New Project.

      

   2. Enter a Project Name and Project ID.

   3. Enter a Location if you already have a parent organization you want to use.

   4. Select Create.

      The project's DASHBOARD appears.

3. In the left pane , under COMPUTE, select Compute Engine > Images.

4. Search for "k170v" images. The Images page appears.

5. On the Images, select the latest image in the table (recommended).

   

6. At the top of the Images page, select CREATE INSTANCE.

   The Create an instance form appears.

   Note

   Not all fields must be filled-in or modified. The following steps address the fields needed for most deployments. Many of the fields can be modified after deployment.

7. To create a k170v instance, modify these fields.

   1. Enter a Name for the instance, for example, "k170v-test".

   2. Select the Region and Zone closest to your location.

   3. For Machine type, enter the minimum number of vCPUs. The recommended minimum is 1.

      Then select Customize to select a memory size. The recommended minimum is 16 GB.

      Note

      The Boot disk fields are already populated by the selected CipherTrust Manager k170v image.

   4. In the Firewall field, you must check both boxes Allow HTTP traffic and Allow HTTPS traffic.

      

8. At the bottom of the form, select the Security tab. The Security form appears:

9. Enter your SSH public key in the box provided. The key pair should be in Linux (PEM) format, not OpenSSH format.

   If a valid public key is entered, Google Cloud will place the key name to the left of the box.

   Warning

   It is important that you have access to the key pair you select, otherwise you will not have permissions to perform administrator operations like performing upgrades, advanced logging or an appliance reset.

   

10. Select Create to create the k170v VM.

    Your new VM is created and appears in the VM instances table.

    

11. Click on the External IP for the newly created VM.

    A new browser tab opens to this address and the CipherTrust Manager k170v Web Page Log In screen appears.

    

12. Log in using the initial default credentials for the "ksadmin": Username = admin, Password = admin

    The following notice is displayed:

    

    Note

    If the default credentials do not work, you may need to retrieve an autogenerated password, as described in Changing the Initial Password.

13. Enter a new password using this default Password Policy:

    Min length: 8
    Max length: 30
    Min number of upper cases: 1
    Min number of lower cases: 1
    Min number of digits: 1
    Min number of other characters: 1
    

    A new Login screen appears.

14. Using your new password, log in again. The CipherTrust Manager k170v Web Page appears.

    

Congratulations! You have successfully deployed a CipherTrust Manager k170v instance.