Register the KMES Series 3 as a standard key provider in vCenter by using the vSphere client

Before you can start with virtual machine encryption tasks, you must set up the standard key provider. Setting up a standard key provider includes adding the key provider and establishing trust with the key server. When you add a key provider, the system prompts you to make it the default. You can explicitly change the default key provider. vCenter Server provisions keys from the default key provider.

We now call a Key Management Server cluster in vSphere 6.5 and 6.7 a key provider.

Browse the inventory list and select the vCenter Server instance.

Select [ Configure ] and select Key Providers under Security.

Select Add > Add Standard Key Provider.

Enter the key provider information and select [ Add Key Provider ].

The values specified in the Name and KMS fields can be anything. You should set the IP address of your KMES in the Address field and specify the port number for the KMIP connection pair on the KMES (it is 5696 by default) in the Port field. Disregard the Proxy configuration and Password protection fields.

When you see the TLS certificate configured for KMIP connection pair on the KMES, select [ Trust ].

The KMES Series 3 now shows as a key provider in the vSphere Client.