Change key manager

This article describes how to change a key manager. CRDP uses the CipherTrust Manager as a trusted key manager.

For Kubernetes deployment with Helm

1. In the values.yaml file, under the env section, update the value of kms with a valid IP address or hostname of the CipherTrust Manager.

2. Upgrade your CRDP deployment.

   helm upgrade <helm chart name> <path of helm chart>

   Copy

For Kubernetes deployment without Helm

1. In the CRDP deployment file (for example, <crdp-deployment.yaml>), update the value of KEY_MANAGER_HOST with a valid IP address or hostname of the CipherTrust Manager.

2. Update your CRDP deployment.

   kubectl replace -f <crdp-deployment.yaml>

   Copy

For Standalone deployment

1. Stop the existing container.

2. In the environment variable, update the KEY_MANAGER_HOST field with a valid IP address or hostname of the CipherTrust Manager

3. Start the container.

   docker run -e KEY_MANAGER_HOST=<new_IP address or host name> -e REGISTRATION_TOKEN=<registration token> -p <host port>:<CRDP_port> -e SERVER_MODE=tls-cert-opt -e CERT_VALUE="<certificate>" -e KEY_VALUE="<key value>" <crdp image name>

   Copy