Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Any options to replace kek and doesnt use HSM for barbican?

Hi All,

I need to change my barbican secret store in production. I looked into https://docs.openstack.org/barbican/rocky/install/barbican-backend.html, apart KEK all other plugins need a device. Is there a way to stay with the "Simple Crypto Plugin", but change kek?

Regards, Rajiv

Any options to replace kek and doesnt use HSM for barbican?

Hi All,

I need to change my barbican secret store in production. I looked into https://docs.openstack.org/barbican/rocky/install/barbican-backend.html, apart KEK all other plugins need a device. Is there a way to stay with the "Simple Crypto Plugin", but change kek?

Regards, Rajiv