Encrypt existing kvm

[rai_ashwinikuma]

We have multiple of KVM available in our environment and we want to encrypt some of them. Instead of deleting and creating a new KVM we would just want to update the KVM from plain text to encrypted.

[hanselm]

Hi Ashwini, you will have to use the mgmt apis to first GET entries from the original KVM and call the Create api to create a new encrypted KVM tand add the entries back. Here is the mgmt apis to do:

GET: http://docs.apigee.com/management/apis/get/organizations/%7Borg_name%7D/environments/%7Benv_name%7D/...

CREATE: http://docs.apigee.com/management/apis/post/organizations/%7Borg_name%7D/environments/%7Benv_name%7D...

[rai_ashwinikuma]

The create api will fail as the KVM is already there in the environment.

[rdeandrade]

Also, please keep in mind that all proxies referencing the existing KVMs will need to be updated to reference the data from the new encrypted KVM with a 'private.' prefix to the 'assignTo' entries where you specify the variable where you'll read data from the KVM to the variable.

http://docs.apigee.com/api-services/reference/key-value-map-operations-policy#getencrypted

[rai_ashwinikuma]

Thanks Ricardo. But can you tell me about the encryption of existing KVM. The update management apis are deprecated. So I am left with the option of deleting and creating new KVM.

[#6]

@Ashwini Rai, Encryption of a KVM is only possible at creation time. So you have to create a new encrypted KVM.

[rai_ashwinikuma]

Thanks man for confirming