{"id":34424,"date":"2018-09-13T09:00:29","date_gmt":"2018-09-13T07:00:29","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=34424"},"modified":"2023-07-16T11:27:56","modified_gmt":"2023-07-16T09:27:56","slug":"vsphere-vms-encryption-setup-vcenter-server-pt-2","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/vsphere-vms-encryption-setup-vcenter-server-pt-2\/","title":{"rendered":"vSphere VMs encryption:\u00a0setup vCenter Server - pt.2"},"content":{"rendered":"

\"virtual-machines-encryption-setup-vcenter-01\"<\/p>\n

To take advantage of virtual machines encryption feature in VMware vSphere<\/a>, the KMS Server and the vCenter Server must be properly configured to establish a connection.<\/p>\n

Once the KMS Server<\/a> has been installed and configured, the vCenter Server must be configured accordingly to establish a trust<\/strong> with the KMS.<\/p>\n

 <\/p>\n

Blog series<\/h2>\n

vSphere VMs encryption: KMS Server installation - pt.1<\/a>
\nvSphere VMs encryption:\u00a0setup vCenter Server - pt.2
\nvSphere VMs encryption: encrypt virtual machines - pt.3<\/a><\/p>\n

 <\/p>\n

Setup the vCenter Server<\/h2>\n

From the vSphere Web Client, right click the vCenter Server and select Settings<\/strong>.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-02\"<\/p>\n

In Configure<\/strong> tab select the Key Management Servers<\/strong> option under More<\/strong>\u00a0and click Add KMS icon<\/strong> to add the KMS Server previously configured.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-03\"<\/p>\n

Specify the required parameters and click OK<\/strong> to save the configuration. Optionally the User name<\/strong> to use is the user created during the KMS configuration.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-04\"<\/p>\n

Since it's the first KMS cluster configured, click Yes<\/strong> to set it as default.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-05\"<\/p>\n

Click Trust<\/strong> button in the displayed certificate.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-06\"<\/p>\n

The KMS Server has been added. Note the Connection Status<\/strong> is reported as Cannot establish a trust relationship<\/strong>.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-07\"<\/p>\n

Next step is to\u00a0establish a trust relationship\u00a0between the vCenter Server and the KMS Server.\u00a0From All Actions<\/strong>\u00a0drop-down menu select Establish trust with KMS<\/strong>.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-08\"<\/p>\n

Select Upload certificate and private key<\/strong>\u00a0option then click OK<\/strong>.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-09\"<\/p>\n

You need to upload the file\u00a0username.pem<\/em>\u00a0downloaded from the KMS Server twice. Click the Upload file<\/strong> button for the KMS certificate and the private key then select the username.pem<\/em> certificate (VCSA.pem in the example) and click Upload file<\/strong>.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-10\"<\/p>\n

After selecting the file twice, click OK<\/strong>\u00a0to upload the certificate.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-11\"<\/p>\n

When the certificate has been imported, the Connection Status<\/strong> is reported as Normal<\/strong>.<\/p>\n

\"virtual-machines-encryption-setup-vcenter-12\"<\/p>\n

The trust between the KMS Server and the vCenter Server has been established successfully<\/strong>.\u00a0Part 3<\/a> will cover the final step of the procedure, that is the encryption of the virtual machines.<\/p>\n

\"signature\"<\/p>\n","protected":false},"excerpt":{"rendered":"

To take advantage of virtual machines encryption feature in VMware vSphere, the KMS Server and the vCenter Server must be properly configured to establish a connection. Once the KMS Server has been installed and configured, the vCenter Server must be configured accordingly to establish a trust with the KMS.<\/p>\n","protected":false},"author":3,"featured_media":34484,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[903,2701],"tags":[1888,1889,583,1551],"class_list":["post-34424","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-vmware-en","category-vsphere-en","tag-kms","tag-trust","tag-vcenter-en","tag-vcsa","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/34424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=34424"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/34424\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/34484"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=34424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=34424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=34424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}