Service Guide

This guide provides instructions on adding the Key Broker for Google Cloud EKM service to Google Cloud EKM. Once you have added the service to Google Cloud EKM, and can access the Key Broker for Google Cloud EKM page, refer to the Key Setup Guide for detailed instructions on adding your master key.

The Key Broker for Google Cloud EKM service requires a unique DPoD tenant. Register for a service tenant by subscribing to the service through the Google Cloud Marketplace. The DPoD tenant account is used for registration and authentication of the Key Broker for Google Cloud EKM service with the service back end. You cannot use an existing tenant.

You require a DPoD subscriber tenant to provision a CipherTrust Data Security Platform service. See Register a Subscriber Tenant for more information about creating a DPoD subscriber tenant.

This document provides detailed instructions on:

• Registering for the service
• Removing the service

Registering for the service

Register for the service through the Google Cloud Marketplace. Select a region that is geographically near your Google Cloud Platform to reduce network latency issues between your Google Cloud Project and Key Broker for Google Cloud EKM service.

Note

To purchase SaaS products, you must have the Billing Administrator role for the active billing account, and the Project Editor role for the project that you want to add the service for. See Pricing Plans for SaaS products for more information.

1. Access the Google Cloud Marketplace and search for the Key Broker for Google Cloud EKM service for your region.

   • CipherTrust Key Broker [NA]
   • CipherTrust Key Broker [EU]

2. Click Subscribe. This redirects to an Order Summary page where you can select a plan, define the Purchase details, and agree to the service Terms. Click Subscribe again.

   Register with the Thales Data Protection on Demand region that is geographically near your Google Cloud Platform. Select:

   • REGISTER WITH THALES - NORTH AMERICA - OTTAWA
   • REGISTER WITH THALES - EUROPEAN UNION - FRANKFURT

3. Complete the service tenant registration. You can register for a DPoD tenant at https://market.dpondemand.io/.

   Record the DPoD tenant login URL. The DPoD log in URL is required to log in to the Key Broker for Google Cloud EKM service page - welcome.dpondemand.io

4. Access the Key Broker for Google Cloud EKM by logging into your DPoD tenant at welcome.dpondemand.io and selecting the service from the services list.

Removing the service

Remove the service through the Google Cloud Marketplace.

1. Find and select the service listing in the Google Cloud Marketplace.

   • CipherTrust Key Broker [NA]
   • CipherTrust Key Broker [EU]

2. Click Cancel auto-renewal to put the service into the cancellation state. The service will expire and billing will terminate at the very start of the next month.