Oracle Cloud Infrastructure Documentation

Creating an HSM Cluster

Learn how to create an HSM cluster resource in OCI Dedicated Key Management.

Note that the cluster created for this operation remains in the "Creating" state while Dedicated Key Management provisions three HSM partitions with DNS entries. When the partitions are configured, the state changes to "Initialization Required." See Initializing an HSM Cluster for details on initializing the new cluster.

    1. On the HSM cluster list page, select Create HSM Cluster. If you need help finding the list page, see Listing HSM Clusters.
    2. In the Create HSM Cluster page, select a compartment in which you want to create the HSM cluster.
    3. Enter a name for the cluster.
    4. Select Tags to add tags to the cluster.
      Note

      If you have permissions to create a resource, then you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags.
    5. Select Create.

      After the HSM cluster is created, the cluster state changes from "Creating" to "Initialization Required."

  • Use the oci kms kms-hsm-cluster hsm-cluster create command and required parameters to create an HSM cluster.

    oci kms kms-hsm-cluster hsm-cluster create -compartment-id <hsm_cluster_ocid> [OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Use the CreateHSMCluster API with the KMSHSMCLUSTER API endpoint to create an HSM cluster.

    Note

    The HSM Cluster Endpoint is used for is used for cluster management operations including Create, Update, List, Get, and Delete. This endpoint is also called the KMSHSMCLUSTER endpoint.

    For regional endpoints for the Key Management, Secret Management, and Secret Retrieval APIs, see API Reference and Endpoints.

    For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.