Settings

The AIStor Key Manager process supports the following environment variables for controlling process behavior.

Deprecated

Specify either the plaintext license string or path to a plaintext file containing the license. This environment variable is deprecated and ignored in current versions of Key Manager.

The Key Manager server searches for the license in the following order:

1. Value of the MINIO_LICENSE environment variable
2. A minio.license file in the current working directory
3. A minio.license file in the $HOME/.minkms directory

Required

The Hardware Security Module (HSM) key to use for cryptographic and authentication operations.

Specify the output of minkms --soft-hsm.

You can remove this variable after configuring at least one external HSM.

Required

Specify a comma separated list of Key Manager server hostnames to perform operations against when using minkms CLI commands. For example:

MINIO_KMS_SERVER=https://minkms-1.example.net:7373,https://minkms-2.example.net:7373,https://minkms-3.example.net:7373

This environment variable is only required for performing client API operations. If omitted, minkms commands default connecting to 127.0.0.1:7373. Commands which support or require specifying a HOST[:PORT] use that value as a priority over this environment variable.

Required

Specify the API key of an identity to use when authenticating to a Key Manager server.

This environment variable is only required for performing client API operations.

Optional

Specify the enclave to use when performing a client API operation.