Getting started

Refer to the following sections below to get started with the integration.

Supported configurations

Thales has tested integration with HashiCorp Vault 1.3.0 using the configurations shown in the table below.

Setting up your environment for the integration

Before beginning the integration, you must set up your environment for the integration.

To set up your environment for the integration

1. Install one of the supported operating systems on the client machine. Refer to Supported configurations for more information.

2. Set up, initialize, provision, and prepare a ProtectServer 3 HSM for deployment. Refer to ProtectServer 3 HSM and ProtectToolkit 7 installation and configuration for more information.

3. Install ProtectToolkit 7 on the client machine. Refer to ProtectToolkit 7 software installation for more information.

4. Configure the ProtectServer 3 HSM for the integration.

   1. Create a slot on the HSM that will be used by Vault. Refer to Adding and removing slots for more information.

   2. Verify that the the HSM is successfully configured by running hsmstate.

      [root@localhost ~]# hsmstate
      HSM device 0:   HSM in NORMAL MODE. RESPONDING. Usage Level=0%
      [root@localhost ~]# ctkmu l
      ProtectToolkit C Key Management Utility 7.1.0
      Copyright (c) Safenet, Inc. 2009-2019
      Cryptoki Version  = 2.20
      Manufacturer      = Safenet, Inc.
      Test                             (Slot 0)
      AdminToken (524128)              (Slot 1)
      [root@localhost ~]#
      

5. Download, install, and set up HashiCorp Vault for the integration.

   1. Download the Vault package from HashiCorp.

   2. Unzip the package in the working directory on the host machine.

      Vault runs as a single binary named "vault".

   3. Add the current working directory to PATH so that Vault is executable from any directory.

   4. Verify that Vault installed successfully by opening a new terminal session and if the the Vault binary is available.

      The following output should appear after running Vault from the terminal: