Cryptographic Security Platform Vault nodes are typically clustered. Before invoking hicli commands, you must first select a Cryptographic Security Platform Vault node to talk to. If you have a cluster of two or more nodes, it does not matter which Cryptographic Security Platform Vault node is chosen. Since the nodes operate in an active-active cluster, any change to any node is immediately reflected on all nodes in the cluster.

You select a node as follows:

$ hicli kc select kc-1
$ hicli kc
Current CSP Node: kc-1
$ hicli kc select 192.168.140.152
$ hicli kc 
Current CSP Node: 192.168.140.152

DNS is used to resolve hostnames, so either be sure to set up DNS for all your Cryptographic Security Platform Vault nodes, or use IP addresses, as shown above.