Description The mc replicate command configures and manages per-bucket Server-Side Bucket Replication for an AIStor deployment, including active-active replication configurations and resynchronization. For site-level replication, see mc admin replicate. Subcommands mc replicate includes the following subcommands:

mc support upload copies a file from the local file system to a SUBNET ticket. Syntax The command has the following syntax: mc [GLOBALFLAGS] support profile \ ALIAS \ FILE \ [--comment "string"] \ [--enc] \ [--issue integer] Parameters ALIAS Required

Reference

MinIO Key Encryption Service This site provides information about MinIO ’s Key Encryption Service (KES) project. The ...

This page documents the installation of the AIStor Key Encryption Service for the purpose of supporting migration to AIStor Key Manager. You may require root or sudo permissions to perform some of the steps. Linux AMD64 curl --progress-bar --retry 10 -L https://dl.min.io/aistor/kes/release/linux-amd64/kes -o kes chmod +x ./kes mv ./kes /usr/local/bin/kes kes --version ARM64

This tutorial shows how to setup a KES server that uses a Thales CipherTrust Manager instance (formerly known as Gemalto KeySecure) as a persistent and secure key store. K E S C l i e n t K E S S e r v e r C i p h e r T r u s t M a n a g e r This guide assumes that you have a running CipherTrust Manager instance. It has been tested with CipherTrust Manager k170v version 2.0.0 and Gemalto KeySecure k170v version 1.9.1 and 1.10.0.

This section provides documentation on the AIStor Key Encryption Service (KES). AIStor KES is a maintained fork of the AGPL 3.0-licensed MinIO KES project. This documentation aims to provide guidance for installation and maintance of KES for SUBNET customers who cannot migrate to or deploy Key Manager.

Overview Returns the identity of either an api key or a certificate. Syntax Return the identity from an api-key:

Overview Generate a new data encryption key (DEK) from a secret key on the KES server. The output of the command includes both a plaintext key and a ciphertext representation. The output resembles the following: plaintext: kk/+NxO1LHb9ilbai7B9qo60649zNPmSVuJ2akEJFQ4= ciphertext: lbFBRVMyNTYtR0NNX1NIQTI1NtkgMTRlYjE3YWVjMTBjZDMxYTZiYzAwNmJhODFkNjM1ODnEEKOclQFBMYNZ3dVJPCrldAHEDLkZD9YgLpFW77+8b8Qw7Tn/6tFhyYUoFzS4+jYv8ty/Y5bqKzU6lPUEq/O8xEnYs92wEyvdSfTpTDEH8a8Q To encrypt or decrypt the keys, use kes key encrypt or kes key decrypt.

Overview Assign a KES policy to identities. Syntax kes policy assign \ <policy> \ <identity> \ [--insecure, -k] Parameters policy The name of the policy to add to the identity.