Before you begin, make sure you have the following information:

  • The instance ID for the Cryptographic Security Platform Vault instance. This is located in the Basic Information section on the Details page of the instance.

  • The External IP associated with the instance.

To configure the first GCP node

  1. Use a web browser to navigate to tghe HTTPS external IP address. 

  2. If prompted, add a security exception for theVault IP address and proceed to theVault Management web GUI. 

    Cryptographic Security Platform Vault uses its own Root Certificate Authority to create its security certificate, which means that certificate will not be recognized by the browser. For details, see CSP Vault Certificates.

  3. On the Entrust Cryptographic Security Platform Vault Management login page, enter secroot for the username and the Instance ID for the password.

  4. Click Login.

  5. Review the EULA (end user license agreement). When you are done, click I Agree to accept the license terms.
  6. On the Welcome to Appliance Management screen, click Continue as a Standalone Node.

  7. On the Change Password page, enter a new password for the secroot account and click Update Password.

  8. On the Configure E-Mail and Mail Server Settings page, specify your email settings. Vault sends an email with the Admin Key for the new node. It also sends system alerts to this email address. 

    To disable alerts, select the Disable e-mail notifications checkbox. You are then prompted to download the Admin Key.

  9. When you are done, click Continue.

  10. On the Download Admin Key page, click the Download button to save the admin key locally. 

    Keep the admin key in a safe place for later use. When Cryptographic Security Platform Vault prompts for an admin key to recover your Cryptographic Security Platform Vault system, you must provide this admin key to proceed. If you do not have your admin key, you may lose your data.


  11. When you are finished, click Continue.  Vault displays the Management web GUI.