• Deploy the OVF template, follow the wizard, then wait until the virtual machine is powered on.
  • Launch Web console for HYTRUST Key Control virtual machine:
  • Choose Option 1: Install Initial KeyControl Mode, and follow the wizard:
  • During install, a single administrator is automatically created with a username of secroot with a password of secroot. For your first login, you must use this login. You can and must change the password, but you cannot change the username. 
  • Enable KIMP: Change State from DISABLED to ENABLED, Then save configuration:
  • Add Key Management Server (KMS):
  • Make a New Certificate Request (CSR) :
  • Download Certificate Signing Request to Desktop:
  • In HyTRUST KeyControl go to KIMP> Actions >Create Certificate. In the create certificate wizard, use the previous vCenter CSR file.
  • The new certificate is generated and ready for download in compressed format.
  • Open VCSACERT using notepad copy the text part from Begin Certificate to End Certificate.
  • Choose Signed CSR Certificate, and paste the previously copied certificate text.
  • Create a VM Storage Policy to enable Encryption, and then we attach this encryption policy to the test virtual machine, which will be reconfigured and encrypted. 

Leave a Reply