Configuring a KeyControl Database Connector

Before creating the KeyControl Database Connector, you must ensure you have enabled TDE on the SQL Server VM. See Installation Requirements for Microsoft SQL Server TDE . After you create the connector, you can generate an access token to be used to configure the cryptographic provider.

1. Create a Database Connector for this Key Set and the SQL Server VM.

   This is the VM that you registered when you installed the Policy Agent. See Installing and Registering the Entrust Policy Agent.

2. Select the Key Set that you want to use and then scroll down to select the Database Connectors tab.

3. Select Actions > Create Connector.

   If there are no database connectors created, you can also click Create Connector Now.

4. In the Create Database Connector dialog box, enter the VM Name and Connector Name, then select the Expiration.

5. Click Create.

   If the database connector is created correctly, you will see it listed in the table beneath the Database Connectors tab as ENABLED.

6. Select the database connector that you just created, and select Actions > Generate Access Token.

   On the Generate Access Token window, the new access token is created and displays both an identity and a secret. You will need to copy these to use when configuring the cryptographic provider.