Adding BYOK Support for a Key Management Server

You can add BYOK support for a Key Management Service (KMS) server from the Command Center.

Before You Begin

• Obtain the key ID provided by your KMS provider after you import or generate the key using the KMS provider interface. The key ID must be in the following format: keyid/version ID.

• If the key is revoked, Commvault software deletes it automatically. To keep the key after it is revoked, remove the permission that allows Commvault to delete the key.

Procedures:

1. From the Command Center navigation pane, go to Manage > Settings > Advanced.

2. Click the Key management servers tile.

   The Key management servers page appears.

3. Click the KMS server you want to add the BYOK support for.

   The key management server page appears.

4. Under Bring yor own key ares, click Add.

   The Add Bring your own key option dialog box appears.

5. In the Key ID box, enter the key ID.

6. Click Submit.