Barbican is an OpenStack service that provides a REST API for secured storage as well as for provisioning and managing of secrets such as passwords, encryption keys, and X.509 certificates.
Barbican requires a back end to store secret data in its database.
If you have an existing Dogtag back end, deploy and configure Barbican with it
as described in Deploy Barbican with the Dogtag back end. Otherwise, deploy a new
Dogtag back end as described in Deploy Dogtag.
For testing purposes, you can use the simple_crypto back end.
Note
Due to a limitation, unshelving of an instance and booting from a snapshot require manual intervention when integration between Nova and Barbican is enabled and instances are only allowed to boot from signed Glance images. Both shelve and snapshot operations in Nova create an image in Glance. You must manually sign this image to enable Nova to boot an instance from this snapshot or to unshelve an instance. Nova does not automatically sign the snapshot images it creates.
See also