Cryptographic Security Platform Vault nodes are typically clustered. Before invoking hicli commands, you must first select a Cryptographic Security Platform Vault node to talk to. If you have a cluster of two or more nodes, it does not matter which Cryptographic Security Platform Vault node is chosen. Because the nodes operate in an active-active cluster, any change on one node is immediately reflected across the cluster.

You select a node as follows:

$ hicli kc select kc-1
$ hicli kc
Current CSP Node: kc-1
$ hicli kc select 192.168.140.152
$ hicli kc
Current CSP Node: 192.168.140.152

DNS resolves hostnames, so either set up DNS for all your Cryptographic Security Platform Vault nodes or use IP addresses, as shown above.