Ensure Keys in the IBM Cloud® Key Protect Service are configured for high availability

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To check if a of Key Protect instance is provisioned in one of the cross-regions supported Key Protect Service, complete the following steps. Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. From your IBM Cloud resource list, click on Security select to view all your provisioned Key Protect instances. 4. Click on instance you want to check cross-region high availability 5. Click on the endpoints on the left-hand panel and verify if the region in the endpoint is one of the regions that has cross-region high availability.

How it is fixed

Fix method: Guidance or infrastructure patch

To get a list of Key Protect instances from the IBM Cloud console, complete the following steps. Log in to your IBM Cloud account. Using Console: 1. Click Catalog to view the list of services that are available on IBM Cloud. 2. From the All-Categories navigation pane, click the Security and Identity category. 3. From the list of services, click the Key Protect tile. 4. Select a service plan, and click Create to provision an instance of Key Protect in the account, region that has cross-region support, and resource group where you are logged in.