Service Guide

This guide provides instructions on adding the Key Broker for Google Cloud EKM service to Google Cloud EKM. Once you have added the service to Google Cloud EKM, and can access the Key Broker for Google Cloud EKM page, refer to the Key Setup Guide for detailed instructions on adding your master key.

The Key Broker for Google Cloud EKM service requires a unique DPoD tenant. Register for a service tenant by subscribing to the service through the Google Cloud Marketplace. The DPoD tenant account is used for registration and authentication of the Key Broker for Google Cloud EKM service with the service back end. You cannot use an existing tenant.

You require a DPoD subscriber tenant to provision a CipherTrust Data Security Platform service. See Register a Subscriber Tenant for more information about creating a DPoD subscriber tenant.

This document provides detailed instructions on:

• Registering for the service
• Removing the service

Registering for the service

Register for the service through the Google Cloud Marketplace. Select a region that is geographically near your Google Cloud Platform to reduce network latency issues between your Google Cloud Project and Key Broker for Google Cloud EKM service.

1. Access the Google Cloud Marketplace and search for the Key Broker for Google Cloud EKM service for your region.

   • CipherTrust Key Broker [NA]
   • CipherTrust Key Broker [EU]

2. Click Subscribe. This redirects to an Order Summary page where you can select a plan, define the Purchase details, and agree to the service Terms. Click Subscribe again.

   Register with the Thales Data Protection on Demand region that is geographically near your Google Cloud Platform. Select:

   • REGISTER WITH THALES - NORTH AMERICA - OTTAWA
   • REGISTER WITH THALES - EUROPEAN UNION - FRANKFURT

3. Complete the service tenant registration. When you register your service you will be given access to a DPoD tenant. See About the Automated Tenant Registration Page for more information.

   Record the DPoD tenant login URL. The DPoD tenant log in URL is required to log in to the Key Broker for Google Cloud EKM service page. The DPoD tenant log in URL is structured based on the region.

   • NA: https://<hostname>.uaa.system.snakefly.dpsas.io/login
   • EU: https://<hostname>.uaa.system.pegasus.dpsas.io/login

   After you register the service you are redirected to the Key Broker for Google Cloud EKM service page for your region. You must submit the DPoD tenant log in URL and your user account credentials to log in to the service.

Removing the service

Remove the service through the Google Cloud Marketplace.

1. Find and select the service listing in the Google Cloud Marketplace.

   • CipherTrust Key Broker [NA]
   • CipherTrust Key Broker [EU]

2. Click Cancel auto-renewal to put the service into the cancellation state. The service will expire and billing will terminate at the very start of the next month.