> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deploy the service

> Deploy the Generic KMIP service on CryptoHub to enable external key management for Nutanix AOS.

*Deploy the Nutanix AOS service on CryptoHub. This service listens on port 5696 and manages the AES-256 Key Encryption Keys (KEKs) that Nutanix retrieves to encrypt and decrypt data on the cluster.*

Complete the following steps to deploy the service in CryptoHub:

<Steps>
  <Step>
    Log in to the CryptoHub under dual control using your administrator identities.
  </Step>

  <Step>
    Navigate to the service management section and locate the **Nutanix AOS** service template.

    Select **\[ Deploy ]**.
  </Step>

  <Step>
    Configure the following **Service Setup** settings:

    * **Service Name**: A descriptive identifier (for example, `Nutanix-KMIP`). Leave the default if no changes are needed.
    * **Service Category**: Leave as default.

    Select **\[ Next ]**.
  </Step>

  <Step>
    Configure the following **Access Control** settings:

    * **Authorized Resources**: The role you are logged in with has access to the service by default.
    * **Add Additional Resources**: Optional.

    Select **\[ Next ]**.
  </Step>

  <Step>
    Configure the following **Service Info** setting:

    * **Authentication Mechanism**: Leave it set to the default authentication mechanism.

    Select **\[ Deploy ]**.
  </Step>
</Steps>