Skip to main content
Before the KMES Series 3 can push key material to AWS KMS, you must create credentials in the AWS IAM service and then configure them on the KMES. In AWS IAM, these credentials are Access Keys. On the KMES, the credentials are Cloud Credentials. These credentials enable communication between the KMES Series 3 and AWS KMS.

​
Create an access key in AWS IAM

1
Log in to the AWS Management Console.
2
Navigate to the Identity and Access Management (IAM) service:https://console.aws.amazon.com/iam/home
3
On the right toolbar, under Quick Links, go to My Security Credentials.
4
This page has the following tabs:AWS IAM Credentials,AWS CodeCommit Credentials, and Amazon MCS Credentials. Go to the first tab,AWS IAM Credentials.
5
Under Access keys for CLI, SDK, and API access, select [ Create access key ].
6
Create a symmetric access key. After you finish, you get the Access Key ID and Secret Access Key. Either write the values down and populate a CSV with them, or use the on-page option to download and save the CSV in the following format:
None
Access key ID,Secret access key
AccessID,AccessKey
This is the only time you can view your secret key, so write it down or save it now.
7
Copy or move the CSV file containing the Access Key to the storage medium configured on your KMES Series 3 device.

​
Create a cloud credential

Perform the following steps to create a cloud credential on the KMES:
1
Log in to the KMES Series 3 application interface by using the default admin identities.
2
Navigate to Identity Management > Cloud Credentials.
3
Right-click and select Add> Cloud Credential. Use the following information when creating the Cloud Credential:
OptionRecommendation
NameChoose a descriptive name.
ServiceAmazon Web Services.
Access NameLeave this blank because it auto-populates after import.
4
Select [ Import ] and then select the CSV file with your key IDs.
5
Select [ OK ] to save.