This chapter describes the  hicli tool for managing operations between the Cryptographic Security Platform Vault cluster and an Entrust Policy Agent present in Linux and Windows virtual machines. hicli uses a combination of the Cryptographic Security Platform Vault REST APIs to communicate with Cryptographic Security Platform Vault, and SSH to invoke hcl commands on Windows and Linux VMs.

The Policy Agent provides for encryption of devices within Linux and Windows virtual machines. The Cryptographic Security Platform Vault cluster manages keys and administers the Policy Agent. Administration can take place through the webGUI, through the RESTful APIs, or through using the hicli command.

hicli can only be accessed through the Cryptographic Security Platform Vault for Databases webGUI and the Cryptographic Security Platform Vault for VM Encryption webGUI.

We will be operating with one or more clustered Cryptographic Security Platform Vault nodes, a number of Linux or Windows VMs, and the API Server, a server from which hicli will be invoked. This can be almost any UNIX-like server, including Linux, BSD variants, OS/X and so on.

See below for details.

• Installing and configuring hicli
• hicli command categories
• Selecting a CSP Vault node
• Domain management
• Cloud Admin Group management
• User management
• Cloud VM Set Management
• VM Management
• KMIP Server Management
• KMIP Server Object Management
• AWS S3 Bucket Management
• Alert Management
• Cloud Key Management