Create a KMS configuration using Equinix SmartKey
Encryption at rest uses universe keys to encrypt and decrypt universe data keys. You can use the Yugabyte Platform console to create key management service (KMS) configurations for generating the required universe keys for one or more YugabyteDB universes. Encryption at rest in Yugabyte Platform supports the use of Equinix SmartKey as a KMS.
You can create a KMS configuration with Equinix SmartKey as follows:
- Open the Yugabyte Platform console and navigate to Configs > Security > Encryption At Rest. A list of existing configurations appears.
- Click Create New Config.
- Enter the following configuration details in the form:
- Configuration Name — Enter a meaningful name for your configuration.
- KMS Provider — Select Equinix SmartKey.
- API Url — Enter the URL for the API. The default is
api.amer.smartkey.io. - Secret API Key — Enter the secret API key.
- Click Save. The new KMS configuration should appear in the list of existing configurations. A saved KMS configuration can only be deleted if it is not in use by any existing universes.
- Optionally, to confirm the information is correct, click Show details. Note that sensitive configuration values are displayed partially masked.