published on Tuesday, May 26, 2026 by Piers Karsenbarg
published on Tuesday, May 26, 2026 by Piers Karsenbarg
A Key Management Server (KMS) is a critical component in enterprise data security that handles the lifecycle of cryptographic keys—including creation, storage, rotation, and deletion. In Nutanix environments, KMS integrates with data-at-rest encryption to protect sensitive information stored on clusters. By centralizing key management, organizations can enforce consistent security policies, meet compliance requirements (such as HIPAA, PCI-DSS, and GDPR), and maintain control over who can access encrypted data.
This datasource provides a comprehensive list of all key management servers configured in your environment, including their access details and relevant attributes.
Example
import * as pulumi from "@pulumi/pulumi";
import * as nutanix from "@pierskarsenbarg/nutanix";
const kms_list = nutanix.getKeyManagementServersV2({});
import pulumi
import pulumi_nutanix as nutanix
kms_list = nutanix.get_key_management_servers_v2()
package main
import (
"github.com/pierskarsenbarg/pulumi-nutanix/sdk/go/nutanix"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := nutanix.GetKeyManagementServersV2(ctx, map[string]interface{}{}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Nutanix = PiersKarsenbarg.Nutanix;
return await Deployment.RunAsync(() =>
{
var kms_list = Nutanix.GetKeyManagementServersV2.Invoke();
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.nutanix.NutanixFunctions;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var kms-list = NutanixFunctions.getKeyManagementServersV2(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference);
}
}
variables:
kms-list:
fn::invoke:
function: nutanix:getKeyManagementServersV2
arguments: {}
pulumi {
required_providers {
nutanix = {
source = "pulumi/nutanix"
}
}
}
data "nutanix_getkeymanagementserversv2" "kms-list" {
}
Using getKeyManagementServersV2
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getKeyManagementServersV2(opts?: InvokeOptions): Promise<GetKeyManagementServersV2Result>
function getKeyManagementServersV2Output(opts?: InvokeOptions): Output<GetKeyManagementServersV2Result>def get_key_management_servers_v2(opts: Optional[InvokeOptions] = None) -> GetKeyManagementServersV2Result
def get_key_management_servers_v2_output(opts: Optional[InvokeOptions] = None) -> Output[GetKeyManagementServersV2Result]func GetKeyManagementServersV2(ctx *Context, opts ...InvokeOption) (*GetKeyManagementServersV2Result, error)
func GetKeyManagementServersV2Output(ctx *Context, opts ...InvokeOption) GetKeyManagementServersV2ResultOutput> Note: This function is named GetKeyManagementServersV2 in the Go SDK.
public static class GetKeyManagementServersV2
{
public static Task<GetKeyManagementServersV2Result> InvokeAsync(InvokeOptions? opts = null)
public static Output<GetKeyManagementServersV2Result> Invoke(InvokeOptions? opts = null)
}public static CompletableFuture<GetKeyManagementServersV2Result> getKeyManagementServersV2(InvokeOptions options)
public static Output<GetKeyManagementServersV2Result> getKeyManagementServersV2(InvokeOptions options)
fn::invoke:
function: nutanix:index/getKeyManagementServersV2:getKeyManagementServersV2
arguments:
# arguments dictionarydata "nutanix_getkeymanagementserversv2" "name" {
# arguments
}getKeyManagementServersV2 Result
The following output properties are available:
- Id string
- The provider-assigned unique ID for this managed resource.
- Kms
List<Piers
Karsenbarg. Nutanix. Outputs. Get Key Management Servers V2Km> - List of key management servers (KMS).
- Id string
- The provider-assigned unique ID for this managed resource.
- Kms
[]Get
Key Management Servers V2Km - List of key management servers (KMS).
- id string
- The provider-assigned unique ID for this managed resource.
- kms list(object)
- List of key management servers (KMS).
- id String
- The provider-assigned unique ID for this managed resource.
- kms
List<Get
Key Management Servers V2Km> - List of key management servers (KMS).
- id string
- The provider-assigned unique ID for this managed resource.
- kms
Get
Key Management Servers V2Km[] - List of key management servers (KMS).
- id str
- The provider-assigned unique ID for this managed resource.
- kms
Sequence[Get
Key Management Servers V2Km] - List of key management servers (KMS).
- id String
- The provider-assigned unique ID for this managed resource.
- kms List<Property Map>
- List of key management servers (KMS).
Supporting Types
GetKeyManagementServersV2Km
- Access
Informations List<PiersKarsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information> - KMS Access information, it can be Azure Key Vault access information or KMIP based External Key Manager Access Information.
- Creation
Timestamp string - The timestamp when the key management server was created.
- Ext
Id string - A globally unique identifier of an instance that is suitable for external consumption.
- Links
List<Piers
Karsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Link> - A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
- Name string
- Name of the key management server (KMS).
- Tenant
Id string - Tetant identifier for the Azure Key Vault.
- Access
Informations []GetKey Management Servers V2Km Access Information - KMS Access information, it can be Azure Key Vault access information or KMIP based External Key Manager Access Information.
- Creation
Timestamp string - The timestamp when the key management server was created.
- Ext
Id string - A globally unique identifier of an instance that is suitable for external consumption.
- Links
[]Get
Key Management Servers V2Km Link - A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
- Name string
- Name of the key management server (KMS).
- Tenant
Id string - Tetant identifier for the Azure Key Vault.
- access_
informations list(object) - KMS Access information, it can be Azure Key Vault access information or KMIP based External Key Manager Access Information.
- creation_
timestamp string - The timestamp when the key management server was created.
- ext_
id string - A globally unique identifier of an instance that is suitable for external consumption.
- links list(object)
- A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
- name string
- Name of the key management server (KMS).
- tenant_
id string - Tetant identifier for the Azure Key Vault.
- access
Informations List<GetKey Management Servers V2Km Access Information> - KMS Access information, it can be Azure Key Vault access information or KMIP based External Key Manager Access Information.
- creation
Timestamp String - The timestamp when the key management server was created.
- ext
Id String - A globally unique identifier of an instance that is suitable for external consumption.
- links
List<Get
Key Management Servers V2Km Link> - A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
- name String
- Name of the key management server (KMS).
- tenant
Id String - Tetant identifier for the Azure Key Vault.
- access
Informations GetKey Management Servers V2Km Access Information[] - KMS Access information, it can be Azure Key Vault access information or KMIP based External Key Manager Access Information.
- creation
Timestamp string - The timestamp when the key management server was created.
- ext
Id string - A globally unique identifier of an instance that is suitable for external consumption.
- links
Get
Key Management Servers V2Km Link[] - A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
- name string
- Name of the key management server (KMS).
- tenant
Id string - Tetant identifier for the Azure Key Vault.
- access_
informations Sequence[GetKey Management Servers V2Km Access Information] - KMS Access information, it can be Azure Key Vault access information or KMIP based External Key Manager Access Information.
- creation_
timestamp str - The timestamp when the key management server was created.
- ext_
id str - A globally unique identifier of an instance that is suitable for external consumption.
- links
Sequence[Get
Key Management Servers V2Km Link] - A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
- name str
- Name of the key management server (KMS).
- tenant_
id str - Tetant identifier for the Azure Key Vault.
- access
Informations List<Property Map> - KMS Access information, it can be Azure Key Vault access information or KMIP based External Key Manager Access Information.
- creation
Timestamp String - The timestamp when the key management server was created.
- ext
Id String - A globally unique identifier of an instance that is suitable for external consumption.
- links List<Property Map>
- A HATEOAS style link for the response. Each link contains a user-friendly name identifying the link and an address for retrieving the particular resource.
- name String
- Name of the key management server (KMS).
- tenant
Id String - Tetant identifier for the Azure Key Vault.
GetKeyManagementServersV2KmAccessInformation
- Azure
Key List<PiersVaults Karsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information Azure Key Vault> - Access information for the Azure Key Vault.
- Kmip
Key List<PiersVaults Karsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information Kmip Key Vault> - Access information for the KMIP Key Vault.
- Azure
Key []GetVaults Key Management Servers V2Km Access Information Azure Key Vault - Access information for the Azure Key Vault.
- Kmip
Key []GetVaults Key Management Servers V2Km Access Information Kmip Key Vault - Access information for the KMIP Key Vault.
- azure_
key_ list(object)vaults - Access information for the Azure Key Vault.
- kmip_
key_ list(object)vaults - Access information for the KMIP Key Vault.
- azure
Key List<GetVaults Key Management Servers V2Km Access Information Azure Key Vault> - Access information for the Azure Key Vault.
- kmip
Key List<GetVaults Key Management Servers V2Km Access Information Kmip Key Vault> - Access information for the KMIP Key Vault.
- azure
Key GetVaults Key Management Servers V2Km Access Information Azure Key Vault[] - Access information for the Azure Key Vault.
- kmip
Key GetVaults Key Management Servers V2Km Access Information Kmip Key Vault[] - Access information for the KMIP Key Vault.
- azure_
key_ Sequence[Getvaults Key Management Servers V2Km Access Information Azure Key Vault] - Access information for the Azure Key Vault.
- kmip_
key_ Sequence[Getvaults Key Management Servers V2Km Access Information Kmip Key Vault] - Access information for the KMIP Key Vault.
- azure
Key List<Property Map>Vaults - Access information for the Azure Key Vault.
- kmip
Key List<Property Map>Vaults - Access information for the KMIP Key Vault.
GetKeyManagementServersV2KmAccessInformationAzureKeyVault
- Client
Id string - Client identifier for the Azure Key Vault.
- Credential
Expiry stringDate - When the client secret is going to expire.
- Endpoint
Url string - Endpoint URL for the Azure Key Vault.
- Key
Id string - Master key identifier for the Azure Key Vault.
- Tenant
Id string - Tetant identifier for the Azure Key Vault.
- Truncated
Client stringSecret - Truncated client secret for the Azure Key Vault.
- Client
Id string - Client identifier for the Azure Key Vault.
- Credential
Expiry stringDate - When the client secret is going to expire.
- Endpoint
Url string - Endpoint URL for the Azure Key Vault.
- Key
Id string - Master key identifier for the Azure Key Vault.
- Tenant
Id string - Tetant identifier for the Azure Key Vault.
- Truncated
Client stringSecret - Truncated client secret for the Azure Key Vault.
- client_
id string - Client identifier for the Azure Key Vault.
- credential_
expiry_ stringdate - When the client secret is going to expire.
- endpoint_
url string - Endpoint URL for the Azure Key Vault.
- key_
id string - Master key identifier for the Azure Key Vault.
- tenant_
id string - Tetant identifier for the Azure Key Vault.
- truncated_
client_ stringsecret - Truncated client secret for the Azure Key Vault.
- client
Id String - Client identifier for the Azure Key Vault.
- credential
Expiry StringDate - When the client secret is going to expire.
- endpoint
Url String - Endpoint URL for the Azure Key Vault.
- key
Id String - Master key identifier for the Azure Key Vault.
- tenant
Id String - Tetant identifier for the Azure Key Vault.
- truncated
Client StringSecret - Truncated client secret for the Azure Key Vault.
- client
Id string - Client identifier for the Azure Key Vault.
- credential
Expiry stringDate - When the client secret is going to expire.
- endpoint
Url string - Endpoint URL for the Azure Key Vault.
- key
Id string - Master key identifier for the Azure Key Vault.
- tenant
Id string - Tetant identifier for the Azure Key Vault.
- truncated
Client stringSecret - Truncated client secret for the Azure Key Vault.
- client_
id str - Client identifier for the Azure Key Vault.
- credential_
expiry_ strdate - When the client secret is going to expire.
- endpoint_
url str - Endpoint URL for the Azure Key Vault.
- key_
id str - Master key identifier for the Azure Key Vault.
- tenant_
id str - Tetant identifier for the Azure Key Vault.
- truncated_
client_ strsecret - Truncated client secret for the Azure Key Vault.
- client
Id String - Client identifier for the Azure Key Vault.
- credential
Expiry StringDate - When the client secret is going to expire.
- endpoint
Url String - Endpoint URL for the Azure Key Vault.
- key
Id String - Master key identifier for the Azure Key Vault.
- tenant
Id String - Tetant identifier for the Azure Key Vault.
- truncated
Client StringSecret - Truncated client secret for the Azure Key Vault.
GetKeyManagementServersV2KmAccessInformationKmipKeyVault
- Ca
Name string - Name of the Certificate Authority.
- Ca
Pem string - Cert PEM File.
- Cert
Pem string - Cert PEM.
- Endpoint
Urls List<PiersKarsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url> - Endpoint URL for the Azure Key Vault.
- Private
Key string
- Ca
Name string - Name of the Certificate Authority.
- Ca
Pem string - Cert PEM File.
- Cert
Pem string - Cert PEM.
- Endpoint
Urls []GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url - Endpoint URL for the Azure Key Vault.
- Private
Key string
- ca_
name string - Name of the Certificate Authority.
- ca_
pem string - Cert PEM File.
- cert_
pem string - Cert PEM.
- endpoint_
urls list(object) - Endpoint URL for the Azure Key Vault.
- private_
key string
- ca
Name String - Name of the Certificate Authority.
- ca
Pem String - Cert PEM File.
- cert
Pem String - Cert PEM.
- endpoint
Urls List<GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url> - Endpoint URL for the Azure Key Vault.
- private
Key String
- ca
Name string - Name of the Certificate Authority.
- ca
Pem string - Cert PEM File.
- cert
Pem string - Cert PEM.
- endpoint
Urls GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url[] - Endpoint URL for the Azure Key Vault.
- private
Key string
- ca_
name str - Name of the Certificate Authority.
- ca_
pem str - Cert PEM File.
- cert_
pem str - Cert PEM.
- endpoint_
urls Sequence[GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url] - Endpoint URL for the Azure Key Vault.
- private_
key str
- ca
Name String - Name of the Certificate Authority.
- ca
Pem String - Cert PEM File.
- cert
Pem String - Cert PEM.
- endpoint
Urls List<Property Map> - Endpoint URL for the Azure Key Vault.
- private
Key String
GetKeyManagementServersV2KmAccessInformationKmipKeyVaultEndpointUrl
- Ip
Addresses List<PiersKarsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address> - IP address of the External Key Manager server.
- Port int
- Port of the External Key Manager server.
- Ip
Addresses []GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address - IP address of the External Key Manager server.
- Port int
- Port of the External Key Manager server.
- ip_
addresses list(object) - IP address of the External Key Manager server.
- port number
- Port of the External Key Manager server.
- ip
Addresses List<GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address> - IP address of the External Key Manager server.
- port Integer
- Port of the External Key Manager server.
- ip
Addresses GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address[] - IP address of the External Key Manager server.
- port number
- Port of the External Key Manager server.
- ip_
addresses Sequence[GetKey Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address] - IP address of the External Key Manager server.
- port int
- Port of the External Key Manager server.
- ip
Addresses List<Property Map> - IP address of the External Key Manager server.
- port Number
- Port of the External Key Manager server.
GetKeyManagementServersV2KmAccessInformationKmipKeyVaultEndpointUrlIpAddress
- Fqdns
List<Piers
Karsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Fqdn> - FQDN of the External Key Manager server.
- Ipv4s
List<Piers
Karsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv4> - IPv4 address of the External Key Manager server.
- Ipv6s
List<Piers
Karsenbarg. Nutanix. Inputs. Get Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv6> - IPv6 address of the External Key Manager server.
- Fqdns
[]Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Fqdn - FQDN of the External Key Manager server.
- Ipv4s
[]Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv4 - IPv4 address of the External Key Manager server.
- Ipv6s
[]Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv6 - IPv6 address of the External Key Manager server.
- fqdns list(object)
- FQDN of the External Key Manager server.
- ipv4s list(object)
- IPv4 address of the External Key Manager server.
- ipv6s list(object)
- IPv6 address of the External Key Manager server.
- fqdns
List<Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Fqdn> - FQDN of the External Key Manager server.
- ipv4s
List<Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv4> - IPv4 address of the External Key Manager server.
- ipv6s
List<Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv6> - IPv6 address of the External Key Manager server.
- fqdns
Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Fqdn[] - FQDN of the External Key Manager server.
- ipv4s
Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv4[] - IPv4 address of the External Key Manager server.
- ipv6s
Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv6[] - IPv6 address of the External Key Manager server.
- fqdns
Sequence[Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Fqdn] - FQDN of the External Key Manager server.
- ipv4s
Sequence[Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv4] - IPv4 address of the External Key Manager server.
- ipv6s
Sequence[Get
Key Management Servers V2Km Access Information Kmip Key Vault Endpoint Url Ip Address Ipv6] - IPv6 address of the External Key Manager server.
- fqdns List<Property Map>
- FQDN of the External Key Manager server.
- ipv4s List<Property Map>
- IPv4 address of the External Key Manager server.
- ipv6s List<Property Map>
- IPv6 address of the External Key Manager server.
GetKeyManagementServersV2KmAccessInformationKmipKeyVaultEndpointUrlIpAddressFqdn
- Value string
- FQDN of the External Key Manager server.
- Value string
- FQDN of the External Key Manager server.
- value string
- FQDN of the External Key Manager server.
- value String
- FQDN of the External Key Manager server.
- value string
- FQDN of the External Key Manager server.
- value str
- FQDN of the External Key Manager server.
- value String
- FQDN of the External Key Manager server.
GetKeyManagementServersV2KmAccessInformationKmipKeyVaultEndpointUrlIpAddressIpv4
- Value string
- FQDN of the External Key Manager server.
- Prefix
Length int - Prefix length of the IPv6 address.
- Value string
- FQDN of the External Key Manager server.
- Prefix
Length int - Prefix length of the IPv6 address.
- value string
- FQDN of the External Key Manager server.
- prefix_
length number - Prefix length of the IPv6 address.
- value String
- FQDN of the External Key Manager server.
- prefix
Length Integer - Prefix length of the IPv6 address.
- value string
- FQDN of the External Key Manager server.
- prefix
Length number - Prefix length of the IPv6 address.
- value str
- FQDN of the External Key Manager server.
- prefix_
length int - Prefix length of the IPv6 address.
- value String
- FQDN of the External Key Manager server.
- prefix
Length Number - Prefix length of the IPv6 address.
GetKeyManagementServersV2KmAccessInformationKmipKeyVaultEndpointUrlIpAddressIpv6
- Value string
- FQDN of the External Key Manager server.
- Prefix
Length int - Prefix length of the IPv6 address.
- Value string
- FQDN of the External Key Manager server.
- Prefix
Length int - Prefix length of the IPv6 address.
- value string
- FQDN of the External Key Manager server.
- prefix_
length number - Prefix length of the IPv6 address.
- value String
- FQDN of the External Key Manager server.
- prefix
Length Integer - Prefix length of the IPv6 address.
- value string
- FQDN of the External Key Manager server.
- prefix
Length number - Prefix length of the IPv6 address.
- value str
- FQDN of the External Key Manager server.
- prefix_
length int - Prefix length of the IPv6 address.
- value String
- FQDN of the External Key Manager server.
- prefix
Length Number - Prefix length of the IPv6 address.
GetKeyManagementServersV2KmLink
Package Details
- Repository
- nutanix pierskarsenbarg/pulumi-nutanix
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
nutanixTerraform Provider.
published on Tuesday, May 26, 2026 by Piers Karsenbarg