Change key manager

This article describes how to change a key manager. BDT uses the CipherTrust Manager as a trusted key manager.

For Kubernetes deployment with Helm

1. In the values.yaml file, under the env section, update the value of kmsHost with a valid IP address or hostname of the CipherTrust Manager.

2. Update your BDT deployment.

   helm upgrade <helm chart name> <path of helm chart>
   

For Kubernetes deployment without Helm

1. In the BDT deployment file (for example, <bdt-deployment.yaml>), update the value of KMS_HOST with a valid IP address or hostname of the CipherTrust Manager.

2. Update your BDT deployment.

   kubectl replace -f <bdt-deployment.yaml>
   

For Standalone deployment

1. Stop the existing container.

2. In the environment variable, update the KMS_HOST field with a valid IP address or hostname of the CipherTrust Manager

3. Start the container.

   docker run -e KMS_HOST=<new-IP address or host name of kms> -e REG_TOKEN=<registration_token> -p <host-port>:<bdt-port> <bdt_image_name>