Deploy a vault

Learn how you can deploy a vault to connect an IBM Cloud HSM by using the Vault Deployer available from the IBM Cloud marketplace.

Before you can deploy the vault, you need to install the Vault Deployer which you can get from the Ripple Custody (Vault) Cloud catalog on IBM Cloud marketplace. To get access:

1. Accept Ripple's e-mail invitation to the private IBM Cloud catalog.

2. Navigate to the Vault Deployer.

3. Complete all required fields and select Install.

4. In your IBM Cloud account, navigate to the Resource list and identify the new app ID (Identity provider).

   1. Navigate to Manage Authentication > Cloud Directory > Users.
   2. Select Create User and assign access to users who will use the Vault Deployer.

5. In your IBM Cloud account, navigate to Containers > Serverless > Projects.

   1. Select Applications.
   2. Identify the new code engine application and then select Open URL.

From the Vault Deployer you just opened, you (or any assigned user) can now deploy the vault:

1. Enter your username and password.

2. Check your e-mail for the multi-factor authentication code, enter the code, and then select Continue.

   

   This screen shows the Vault Deployer with the Getting started widget from where you can start to deploy the vault.
   
   

3. On the Getting started widget, select Start and complete all sections to deploy a vault:

   • Create a new vault
   • Configure key management system
   • Configure cloud logs
   • Configure telemetry (optional)
   • Connect a Docker container registry
   • Installation
   Note:

   The Vault Deployer provides step-by-step instructions to guide you through the onboarding experience.

   Once you submit for installation, it takes from three to five minutes to create the resources on IBM Cloud. A summary page will be displayed once the process is complete.

   This screen shows the Vault Deployer with the summary of the settings you selected for deploying the vault. Review the summary before you select Submit.

After the installation is complete, you must connect your vault to your Ripple Custody (Vault) instance.

1. In the Vault Deployer, select Open Ripple Custody (Vault) instance.

2. Log in to your Ripple Custody (Vault) instance.

3. Select Administration > Vaults > Create a vault.

4. In the Vault name field, enter a unique name for the vault.

5. From the Vault Deployer, copy the ID and paste it into the ID field in your Ripple Custody (Vault) instance.

6. From the Vault Deployer, copy the Public key and paste it into the Vault public key field in your Ripple Custody (Vault) instance.

   This screen shows the Vault Deployer with the ID and the public key that you must copy and then paste into your Ripple Custody (Vault) instance to connect the vault.

7. Select Submit for approval and follow your respective approval process.