2017-11-28 21:17:49 +00:00
|
|
|
# A Heat environment file to enable the barbican PKCS11 crypto backend. Note
|
|
|
|
# that barbican needs to be enabled in order to use this.
|
|
|
|
parameter_defaults:
|
|
|
|
# In order to use this backend, you need to uncomment these values and
|
|
|
|
# provide the appropriate values.
|
|
|
|
#
|
|
|
|
# BarbicanPkcs11CryptoLibraryPath: Path to vendor PKCS11 library
|
|
|
|
# BarbicanPkcs11CryptoLogin: Password to login to PKCS11 session
|
|
|
|
# BarbicanPkcs11CryptoMKEKLabel: Label for Master KEK
|
|
|
|
# BarbicanPkcs11CryptoMKEKLength: Length of Master KEK in bytes
|
|
|
|
# BarbicanPkcs11CryptoHMACLabel: Label for the HMAC key
|
|
|
|
# BarbicanPkcs11CryptoSlotId: Slot Id for the HSM
|
|
|
|
# BarbicanPkcs11CryptoGlobalDefault: Whether this plugin is the global default plugin
|
2019-01-17 14:48:42 +00:00
|
|
|
BarbicanPkcs11CryptoEnabled: true
|
|
|
|
BarbicanPkcs11AlwaysSetCkaSensitive: true
|
2017-11-28 21:17:49 +00:00
|
|
|
|
|
|
|
resource_registry:
|
2019-02-04 19:21:46 +00:00
|
|
|
OS::TripleO::Services::BarbicanBackendPkcs11Crypto: ../deployment/barbican/barbican-backend-pkcs11-crypto-puppet.yaml
|