Virtual Infrastructure Crypto Manager Host Kms APIs
Operations
POST
Crypto Manager Host KMS Add Key
Add an existing key.
POST
Crypto Manager Host KMS Add Keys
Add multiple existing keys.
POST
Crypto Manager Host KMS Change Key Task
Change the key used for core dump encryption Note: *CryptoManagerHost.CryptoManagerHostEnable* must be called first If successful, a "best effort" will be made to "in place" shallow recrypt any core dumps found in /var/core to use the new key.
POST
Crypto Manager Host KMS Crypto Manager Host Disable
Disable encryption on host, if host was in crypto safe mode, put it in pendingIncapable state and host will be crypto incapable after a reboot Note: A reboot is expected from user after successfully invoking this API Note: Do not call this API if the host is in vSAN encrypted cluster
POST
Crypto Manager Host KMS Crypto Manager Host Enable
Begin core dump encryption by specifying the encryption key and put the host in *safe* state Note: *CryptoManagerHost.CryptoManagerHostPrepare* must be called first
POST
Crypto Manager Host KMS Crypto Manager Host Prepare
Prime the host to receive sensitive information and put the host in *prepared* state
POST
Crypto Manager Host KMS Get Crypto Key Status
Get the key status on the host.
GET
Crypto Manager Host KMS Get Enabled
Indicate if the encryption feature is enabled.
POST
Crypto Manager Host KMS List Keys
List keys.
POST
Crypto Manager Host KMS Remove Key
Remove a key (only the UUID is needed to remove).
POST
Crypto Manager Host KMS Remove Keys
Remove multiple keys (only the UUID is needed to remove).