Cloud VM Sets are managed by administrators with CLOUD_ADMIN privileges. The administrator must be a member of the Cloud Admin Group that is associated with the Cloud VM Set.

The table below shows the Cloud VM Set operations.

hicli Command

Description

cert detail

Display information about the specified certificate. For examples, see Examples: Cloud VM Set Certificates.

cert new

Create a new certificate for the Cloud VM Set.

cert rm

Remove an unused certificate.

cvmset

Display current Cloud VM Set.

cvmset detail

Display details about the specified Cloud VM Set.

cvmset kek_edit

Change the settings for the KEK (Key Encryption Key) associated with the Cloud VM Set. For examples, see Examples: Cloud VM Sets with the KEK Feature.

cvmset kek_state_change

Revoke or unrevoke the KEK.

cvmset list

List all Cloud VM Sets.

cvmset list_tasks

Display list of tasks for the specified Cloud VM Set.

cvmset new

Create a new Cloud VM Set. For examples, see Examples: Creating and Changing Cloud VM Sets.

cvmset select

Select a Cloud VM Set.

cvmset set

Change properties.

cvmset set grace

Set the value for the grace period in seconds (default is 1 day).

cvmset set heartbeat

Set the value for the heartbeat in seconds (default is 5 minutes, or 300 seconds).

cvmset set name

Change the name of the Cloud VM Set.

cvmset set rekey

Set the value for the automatic rekey of disks interval in days/months/years (defaults to 0 which means not set).

cvmset set rekeybucket

Set the value for the rekeybucket for cvmset which controls the max number of auto rekeys that can be processed in parallel. Auto rekey is triggered when rekey interval expires. This value defaults to 1.

global set

Set the defaults for newly-created Cloud VM Sets. Changing these options does not affect any existing Cloud VM Sets. You can specify:

  • --heartbeat — The default value for the heartbeat in seconds (default is 5 minutes, or 300 seconds).
  • --grace — The value for the grace period in seconds (default is 1 day).

keyid new

Create a KeyID. For examples, see Examples: KeyIDs.

keyid rm

Remove a KeyID.

keyid revoke

Revoke access to a KeyID.

keyid set expiration

Set the expiration date for a KeyID.

keyid set onexpiry

When a KeyID expires, set the expiration policy.

keyid unrevoke

Unrevoke access to a KeyID.

Examples

List the existing Cloud VM Sets:

$ hicli cvmset list
Cloud VM Set Name     Admin Group           Description
---------------------------------------------------
Amazon AWS            Cloud Admin Group     VMs sets sited on Amazon Servers
vCloud Air            Cloud Admin Group     VMs sets deployed on vCloud Air \
                                              servers
Sales Staff           Cloud Admin Group     Sales staff worldwide

Set global default settings:

$ hicli global set --heartbeat=60 --grace=600

For other Cloud VM Set management examples, see: