Change default KMS port on Nutanix

Shares

Nutanix AOS supports data at rest encryption for past several years. On early Nutanix AOS releases, encryption feature was supported only with specialized hardware (SED drives) and external KMS systems. Since Nutanix AOS 5.9, you can leverage software encryption and Local Key Management System (LKMS)

To have a fully supported encryption feature, Nutanix AOS have to have access to the Key Management System. The solution supports external KMS or internal (software based) LKMS integrated with Prism. If you would like to read more about Nutanix native key management system, read one of my previous blog posts.

Default port which is used by Nutanix AOS to connect to Key Management System is 5696. However, you can modify configuration to use different port. It is available from ncli command line.

The command line syntax is:
key-management-server get name=<KMS_NAME>
to get details about existing KMS configuration

To update KMS configuration (in this case, port number), use
key-management-server update address-list IP_Address:port_number

$: key-management-server get name=SKLM
Server Name               : SKLM
    Server UUID               : 57bf-42b5-8dc6-fbb04538abf2
    Active                    : yes

        Address                   : 192.168.56.26
        Port                      : 5696

        Address                   : 192.168.56.27
        Port                      : 5696
0 0 votes
Article Rating

Artur Krzywdzinski

Artur is Consulting Architect at Nutanix. He has been using, designing and deploying VMware based solutions since 2005 and Microsoft since 2012. He specialize in designing and implementing private and hybrid cloud solution based on VMware and Microsoft software stacks, datacenter migrations and transformation, disaster avoidance. Artur holds VMware Certified Design Expert certification (VCDX #077).

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x

FOR FREE. Download Nutanix port diagrams

Join our mailing list to receive an email with instructions on how to download 19 port diagrams in MS Visio format.

NOTE: if you do not get an email within 1h, check your SPAM filters

You have Successfully Subscribed!

Don't miss any posts. Subscribe To Our Newsletter!!

Join our mailing list to receive the latest news and updates from www.vmwaremine.com.

You have Successfully Subscribed!

Pin It on Pinterest