# Install and configure

This section describes how to install and configure the Key Manager service, code-named barbican, on the controller node.

This section assumes that you already have a working OpenStack environment with at least the Identity Service (keystone) installed.

For simplicity, this configuration stores secrets on the local file system.

Note that installation and configuration vary by distribution.

- Install and configure for Red Hat Enterprise Linux and CentOS
  - Prerequisites
  - Install and configure components
  - Finalize installation
- Install and configure for Ubuntu
  - Prerequisites
  - Install and configure components
  - Finalize installation
- Configure Secret Store Back-end
  - Simple Crypto Plugin
  - PKCS#11 Crypto Plugin
  - KMIP Plugin
  - Dogtag Plugin
  - Vault Plugin

this page last updated: 2026-04-01 16:51:00

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug