Use the viocli barbican command to configure OpenStack Barbican.

The viocli barbican command uses the following syntax. 

viocli barbican [-d NAME] --secret-store-plugin {simple_crypto | KMIP} --host KMIP-SERVER --port KMIP-PORT --ca-certs CA-CERT-PATH {{--certfile CERT-FILE --keyfile KEY-FILE} | {--user KMIP-USER --password KMIP-PASSWORD}} [--ssl-version {PROTOCOL_SSLv23 | PROTOCOL_TLSv1 | PROTOCOL_TLSv1_1 | PROTOCOL_TLSv1_2}] [--verbose]
Parameter Mandatory or Optional Description

-d NAME or --deployment NAME

Optional

Name of the deployment to use.

If you do not enter a value, the default deployment is used.

--secret-store-plugin {simple_crypto | KMIP}

Mandatory

Plugin to use for Barbican. Only simple_crypto and KMIP are supported.

--host KMIP-SERVER

Mandatory if the KMIP plugin is used

IP address of the KMIP server.

--port KMIP-PORT

Mandatory if the KMIP plugin is used

Port to connect to the KMIP server.

--ca-certs CA-CERT-PATH

Mandatory if the KMIP plugin is used

Path to the CA certificate file.

--certfile CERT-FILE

Mandatory if the KMIP plugin is used and a username is not specified

Path to the local client certificate file.

You can specify a certificate and key, a username and password, or all four.

--keyfile KEY-FILE

Mandatory if a certificate is specified

Path to the local client key file.

You can specify a certificate and key, a username and password, or all four.

--user KMIP-USER

Mandatory if the KMIP plugin is used and a certificate is not specified

Username to authenticate with the KMIP server.

You can specify a certificate and key, a username and password, or all four.

--password KMIP-PASSWORD

Mandatory if a username is specified

Password to authenticate with the KMIP server.

You can specify a certificate and key, a username and password, or all four.

--ssl-version {PROTOCOL_SSLv23 | PROTOCOL_TLSv1 | PROTOCOL_TLSv1_1 | PROTOCOL_TLSv1_2}

Optional

Version of TLS to use for authentication.

The default value is PROTOCOL_TLSv1_2.

--verbose

Optional

Displays output in verbose mode.

You can also run viocli barbican -h or viocli barbican --help to display the parameters for the command.