This section describes how to use KeyIDs with the Entrust Cryptographic Security Platform Vault to encrypt objects that can be moved between VMs within a single Cloud VM Set.

An encryption object is simply a file that is encrypted using an encryption key stored within the Cryptographic Security Platform Vault cluster. We refer to these keys by their KeyID names, a symbolic name that references the actual encryption key. The KeyID is available to all VMs within a single Cloud VM Set. You cannot share encrypted data across Cloud VM Sets because the members of one set cannot see the members of any other set.

This section includes: 

• Deleting KeyIDs
• Managing KeyID Access
• Changing KeyID Properties
• Envelope Encryption Using KeyIDs
• Using KeyIDs for Encryption and Decryption
• Creating KeyIDs in the webGUI
• Creating KeyIDs with the CLI