1
0
mirror of https://github.com/minio/docs.git synced 2025-07-30 07:03:26 +03:00
Files
docs/source/includes/windows/steps-configure-minio-kes-hashicorp.rst
2024-02-29 12:30:06 -05:00

1.9 KiB

Deploy MinIO and KES with Server-Side Encryption

Prior to starting these steps, create the following folders:

New-Item -Path "|kescertpath|" -ItemType "directory"
New-Item -Path "|kesconfigpath|" -ItemType "directory"
New-Item -Path "|miniodatapath|" -ItemType "directory"

Prerequisite

Depending on your chosen supported KMS target <#supported-kms-targets> configuration, you may need to pass the kes-server.cert as a trusted Certificate Authority (CA). Defer to the client documentation for instructions on trusting a third-party CA.

1) Create the MinIO Configurations

Create the MinIO Environment File

Create the environment file using your preferred text editor. The following example uses the Windows Notepad program:

notepad |minioconfigpath|\minio

2) Start the MinIO Server

Note

You must start KES before starting MinIO. The MinIO deployment requires access to KES as part of its startup.

Start the MinIO Server

3) Generate a New Encryption Key

4) Enable SSE-KMS for a Bucket