Crypto Manager Host APIs

Crypto Manager Host APIs
Operations
POST
Crypto Manager Host Add Key
Add an existing key.
POST
Crypto Manager Host Add Keys
Add multiple existing keys.
POST
Crypto Manager Host Change Key Task
Change the key used for core dump encryption Note: *CryptoManagerHost.CryptoManagerHostEnable* must be called first If successful, a "best effort" will be made to "in place" shallow recrypt any core dumps found in /var/core to use the new key.
POST
Crypto Manager Host Crypto Manager Host Disable
Disable encryption on host, if host was in crypto safe mode, put it in pendingIncapable state and host will be crypto incapable after a reboot Note: A reboot is expected from user after successfully invoking this API Note: Do not call this API if the host is in vSAN encrypted cluster
POST
Crypto Manager Host Crypto Manager Host Enable
Begin core dump encryption by specifying the encryption key and put the host in *safe* state Note: *CryptoManagerHost.CryptoManagerHostPrepare* must be called first
POST
Crypto Manager Host Crypto Manager Host Prepare
Prime the host to receive sensitive information and put the host in *prepared* state
POST
Crypto Manager Host Get Crypto Key Status
Get the key status on the host.
GET
Crypto Manager Host Get Enabled
Indicate if the encryption feature is enabled.
POST
Crypto Manager Host List Keys
List keys.
POST
Crypto Manager Host Remove Key
Remove a key (only the UUID is needed to remove).
POST
Crypto Manager Host Remove Keys
Remove multiple keys (only the UUID is needed to remove).