Add Key Manager Node

1. Deploy the Key Manager onto the new node

   Follow the installation instructions

2. Add the Key Manager node to the existing cluster

   Use the minkms add command to add the node to the existing cluster. You must run this command from a node already part of the cluster:

   minkms add -a ROOT_API_KEY keymanager-01.example.net:7373
   

   The ROOT_API_KEY is distinct from the REK. Retrieve the Root API Key from its secure location, such as a dedicated secrets vault. If you have root access to an existing Key Manager host, you can access the host and review the minkms journal to get the server startup logs and identify the key, prefixed with k1.

3. Review the cluster status

   Use the minkms stat command to retrieve cluster status and validate that the new node joined successfully.