vania-janet/multiturn-rag-retrieval-data huggingface dataset:
mycluster aaf97a8843a29941b49a598f516da72101 normal 20170201162433 3 Dallas 1.26.6_1526 Default vpc-gen2

Is your cluster not in a normal state? Check out the [Debugging clusters](https://cloud.ibm.com/docs/containers?topic=containers-debug_clusters) guide for help. For example, if your cluster is provisioned in an account that is protected by a firewall gateway appliance, you must [configure your firewall settings to allow outgoing traffic to the appropriate ports and IP addresses](https://cloud.ibm.com/docs/containers?topic=containers-firewallfirewall_outbound).
6. Check the status of the worker nodes.

ibmcloud ks worker ls --cluster <cluster_name_or_ID>

When the worker nodes are ready, the worker node State changes to normal and the Status changes to Ready. When the node Status changes to Ready, you can access the cluster. Note that even if the cluster is ready, some parts of the cluster that are used by other services, such as Ingress secrets or registry image pull secrets, might still be in process.

ID Public IP Private IP Flavor State Status Zone Version
kube-blrs3b1d0p0p2f7haq0g-mycluster-default-000001f7 169.xx.xxx.xxx 10.xxx.xx.xxx b3c.4x16.encrypted normal Ready dal10 1.26.6_1526

Every worker node is assigned a unique worker node ID and domain name that must not be changed manually after the cluster is created. If you change the ID or domain name, the Kubernetes master cannot manage your cluster.



Your cluster is ready for your workloads!
<br> <br>For more information, see [Regional service endpoints](https://cloud.ibm.com/docs/key-protect?topic=key-protect-regionsservice-endpoints). 
 IAM_token Required. Your IBM Cloud access token. Include the full contents of the IAM token, including the Bearer value, in the curl request. <br> <br>For more information, see [Retrieving an access token](https://cloud.ibm.com/docs/key-protect?topic=key-protect-retrieve-access-token). 
 instance_ID Required. The unique identifier that is assigned to your Key Protect service instance. <br> <br>For more information, see [Retrieving an instance ID](https://cloud.ibm.com/docs/key-protect?topic=key-protect-retrieve-instance-ID). 
 correlation_ID The unique identifier that is used to track and correlate transactions. 
 return_preference A header that alters server behavior for POST and DELETE operations. <br> <br>When you set the return_preference variable to return=minimal, the service returns only the key metadata, such as the key name and ID value, in the response entity-body. When you set the variable to return=representation, the service returns both the key material and the key metadata. 
 key_name Required. A unique, human-readable name for easy identification of your key. To protect your privacy, do not store your personal data as metadata for your key. 
 alias_list Optional.One or more unique, human-readable aliases assigned to your key. <br> <br>Important: To protect your privacy, do not store your personal data as metadata for your key. <br> <br>Each alias must be alphanumeric, case sensitive, and cannot contain spaces or special characters other than - or _. The alias cannot be a UUID and must not be a Key Protect reserved name: allowed_ip, key, keys, metadata, policy, policies. registration, registrations, ring, rings, rotate, wrap, unwrap, rewrap, version, versions.
This documentation for the classic Watson Assistant experience has moved. For the most up-to-date version, see [Securing your assistant](https://cloud.ibm.com/docs/watson-assistant?topic=watson-assistant-admin-securing). To see all documentation for the new Watson Assistant, please go [here](https://cloud.ibm.com/docs/watson-assistant).



 Securing your assistant 

IBM is committed to providing our clients and partners with innovative data privacy, security, and governance solutions.

Notice: Clients are responsible for ensuring their own compliance with various laws and regulations, including the European Union General Data Protection Regulation (GDPR). Clients are solely responsible for obtaining advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulations that may affect the clients’ business and any actions the clients may need to take to comply with such laws and regulations.

The products, services, and other capabilities described herein are not suitable for all client situations and may have restricted availability. IBM does not provide legal, accounting or auditing advice or represent or warrant that its services or products will ensure that clients are in compliance with any law or regulation.

If you need to request GDPR support for IBM Cloud® Watson resources that are created



* In the European Union, see [Requesting support for IBM Cloud Watson resources created in the European Union](https://cloud.ibm.com/docs/watson/getting-started-gdpr-sar?topic=watson-gdpr-sarrequest-EU).
* Outside the European Union, see [Requesting support for resources outside the European Union](https://cloud.ibm.com/docs/watson/getting-started-gdpr-sar?topic=watson-gdpr-sarrequest-non-EU).





 European Union General Data Protection Regulation (GDPR) 

IBM is committed to providing our clients and partners with innovative data privacy, security and governance solutions to assist them on their journey to GDPR compliance.

Learn more about IBM's own GDPR readiness journey and our GDPR capabilities and offerings to support your compliance journey [here](https://www.ibm.com/data-responsibility/gdpr/).





 Health Insurance Portability and Accountability Act (HIPAA)
If it does, click I consent

Zoom

![MAS-MS-Register-Privacy](https://cloud.ibm.com/docs-content/v1/content/ce5408d6eecb7244ea40dac01f6d3acf7ff60148/mas-saas/images/MAS-MS-Register-Privacy.png)

Figure 10. Register Privacy
4. After entering your IBMid & password, the following page will be displayed. Click on the Request access button:

Zoom

![MAS-MS-Register-Request-Access](https://cloud.ibm.com/docs-content/v1/content/ce5408d6eecb7244ea40dac01f6d3acf7ff60148/mas-saas/images/MAS-MS-Register-Request-Access.png)

Figure 11. Register Request Access
5. The following dialog box will appear:

Zoom

![MAS-MS-Register-Request-Access-Dialog](https://cloud.ibm.com/docs-content/v1/content/ce5408d6eecb7244ea40dac01f6d3acf7ff60148/mas-saas/images/MAS-MS-Register-Request-Access-Dialog.png)

Figure 12. Request Access Dialog
6. Be sure the I consent checkbox is checked, then type Maximo Application Suite on Cloud in the Product field. Select Maximo Application Suite on Cloud from the drop down list and click Submit

Zoom

![MAS-MS-Register-Select-Product](https://cloud.ibm.com/docs-content/v1/content/ce5408d6eecb7244ea40dac01f6d3acf7ff60148/mas-saas/images/MAS-MS-Register-Select-Product.png)

Figure 13. Select Product
7.
Queue manager version change log 

In this section, you can read about IBM queue manager updates by version and revision for IBM MQ on Cloud.



 9.3.3 r1 



 Available from 20th June 2023 



* Updated to MQ version 9.3.3
* For more information see [What's new in MQ 9.3.3](https://www.ibm.com/docs/en/ibm-mq/9.3?topic=delivery-whats-new-changed-in-mq-933)









 9.3.2 r4 



 Available from 3rd May 2023 



* Required security and vulnerability fixes.









 9.3.2 r3 



 Available from 20th April 2023 



* Required security and vulnerability fixes.









 9.3.2 r2 



 Available from 20th March 2023 



* Required security and vulnerability fixes.









 9.3.2 r1 



 Available from 16th February 2023 



* Updated to MQ version 9.3.2
* For more information see [What's new in MQ 9.3.2](https://www.ibm.com/docs/en/ibm-mq/9.3?topic=delivery-whats-new-changed-in-mq-932)









 9.3.1 r2 



 Available from 7th December 2022 



* Required security and vulnerability fixes.









 9.3.1 r1 



 Available from 20th October 2022 



* Updated to MQ version 9.3.1
* For more information see [What's new in MQ 9.3.1](https://www.ibm.com/docs/en/ibm-mq/9.3?topic=SSFKSJ_9.3.0/overview/mq931_new_overview.html)









 9.3.0 r2 



 Available from 4th August 2022 



* Required security and vulnerability fixes.
* Improvements to memory management and liveness checks









 9.3.0 r1 



 Available from 23rd June 2022 



* Updated to MQ version 9.3.0
FAQs for Data Security Broker 

This section provides answers to common questions about the Data Security Broker service.

What is Data Security Broker Manager?

Data Security Broker Manager enables encryption policies and configurations by communicating with the Data Security Broker Shield and the desired databases. Data Security Broker Manager constructs a privacy schema that maps key IDs to data columns, thus enabling encryption in a simplified manner. Data Security Broker Shield carries out de-identification, masking, and encryption tasks for cloud databases.

Data Security Broker integrates with key management stores through a key virtualization layer. It also provides for a local key store, so you can use your own keys for data protection in the cloud.

Is the instance hosted by Data Security Broker?

Data Security Broker software is hosted entirely in the customer's environment. Data Security Broker Manager and Data Security Broker Shield may be hosted on-premises or on cloud platforms such as IBM Cloud.

What size instance is good for getting set up?

30 gigabytes are sufficient for Data Security Broker Manager because it controls the Shields and the memory needed stays static. Sizing for Data Security Broker Shield depends on the number of shields and the number of concurrent users.

What are the prerequisites for installing Data Security Broker?

Make sure you meet the following requirements before configuring Data Security Broker Manager and Data Security Broker Shield:



* Admin privileges for your platform
* The user account used to log in to the Data Security Broker Shield host machine must have a home directory on that system
* SSH client
* Private key pair
* Database privileges for encryption and migration



Do Data Security Broker Manager and Shield run on different instances?

Technically, it is possible for the Data Security Broker Manager and Data Security Broker Shield to both run on the same host. However, it is recommended that separate host instances are provisioned for the Data Security Broker Manager and Data Security Broker Shield, to accommodate different workloads.

Which OS is necessary to set up the Data Security Broker Shield?

Data Security Broker Shield can be installed on instances running with Ubuntu 18 for IBM Cloud Kubernetes cluster (IKS) or RedHat Enterprise Linux (RHEL) 7 for IBM Red Hat OpenShift Kubernetes cluster (ROKS).
Creating and managing a custom security group 

In this tutorial learn how to create, assign instances to, and edit a custom IBM Cloud® security group.

Zoom

![Custom security group](https://cloud.ibm.com/docs-content/v1/content/f3a430977b1e79176682f947de41fc02945c41e7/security-groups/images/goal.jpg)

Create a security group



 What you'll need 

For this example, the following objects and items are used:



What you'll need

 Resource Name Operating System Type Location/DC IP/Subnet 

 Not Applicable/Any 10.0.0.0/16 
 allow_icmp Not Applicable Security Group Not Applicable/Any 0.0.0.0/0 
 allow_ssh Not Applicable Security Group Not Applicable/Any 0.0.0.0/0 
 jpmongevsi2.testing.com Ubuntu 16.04 Virtual server instance Dallas 10 Pod 01 10.0.0.21 
 jpmongevsi4.testing.com Ubuntu 16.04 Virtual server instance Dallas 10 Pod 01 10.0.2.219 



Note that this tutorial makes use of a CPA private network/account, however, for practical purposes security groups behave the same way in both CPA accounts and regular accounts. Subnets 10.0.0.0/24 and 10.0.2.0/24 belong to the same CPA private network, which would be the equivalent of having a regular account with two or more virtual server instances connected to the same private subnet/VLAN.





 What you'll accomplish 

In this tutorial, learn how to...



 Task Description 

 [Create a security group](https://cloud.ibm.com/docs/security-groups?topic=security-groups-creating-a-security-group) Create and configure a custom security group, as opposed to using one predefined by the IBM Cloud platform.
* [What's next](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-key-statesuko-key-states-next)







 About cloud hardware security module - Unified Key Orchestrator Plan 

[Introducing cloud HSM - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-introduce-cloud-hsmuko-introduce-cloud-hsm)



* [What is cloud HSM?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-introduce-cloud-hsmuko-what-is-cloud-hsm)
* [Performing cryptographic operations by accessing the cloud HSM](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-introduce-cloud-hsmuko-cryptography-cloud-hsm)



[Introducing PKCS #11 - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-pkcs11-introuko-pkcs11-intro)



[PKCS #11 implementation components](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-pkcs11-introuko-pkcs11-components)
* [Post-quantum cryptography support](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-pkcs11-introgrep11-support-post-quantum)



[Introducing EP11 over gRPC - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-grep11-introuko-grep11-intro)
* For more information see [What's new in MQ 9.3.1](https://www.ibm.com/docs/en/ibm-mq/9.3?topic=SSFKSJ_9.3.0/overview/mq931_new_overview.html)









 9.3.0 r2 



 Available from 4th August 2022 



* Required security and vulnerability fixes.
* Improvements to memory management and liveness checks









 9.3.0 r1 



 Available from 23rd June 2022 



* Updated to MQ version 9.3.0
* For more information see [What's new in MQ 9.3.0](https://www.ibm.com/docs/en/ibm-mq/9.3?topic=mq-whats-new-changed-in-930)









 9.2.5 r2 



 Available from 4th April 2022 



* Required security and vulnerability fixes.
* Networking updates.









 9.2.5 r1 



 Available from 24th February 2022 



* Updated to MQ version 9.2.5
* For more information see [What's new in MQ 9.2.5](https://www.ibm.com/docs/en/ibm-mq/9.2?topic=delivery-whats-new-changed-in-mq-925)









 9.2.4 r1 



 Available from 18th November 2021 



* Updated to MQ version 9.2.4
* For more information see [What's new in MQ 9.2.4](https://www.ibm.com/docs/en/ibm-mq/9.2?topic=delivery-whats-new-changed-in-mq-924)









 9.2.3 r2 



 Available from 9th August 2021 



* Required security and vulnerability fixes.









 9.2.3 r1 



 Available from 22nd July 2021 



* Updated to MQ version 9.2.3
* [How it works](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-envelope-encryptionenvelope-encryption-overview)
* [Wrapping keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-envelope-encryptionwrapping)
* [Unwrapping keys](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-envelope-encryptionunwrapping)
* [What's next](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-envelope-encryptionenvelope-encryption-next)



[Monitoring the lifecycle of encryption keys - Standard Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-key-stateskey-states)



* [Key states and transitions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-key-stateskey-transitions)
* [Key states and service actions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-key-stateskey-states-service-actions)
* [Monitoring for lifecycle changes](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-key-statesmonitor-lifecycle-changes)







 About cloud hardware security module - Standard Plan 

[Introducing cloud HSM - Standard Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-cloud-hsmintroduce-cloud-hsm)



* [What is cloud HSM?](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-cloud-hsmwhat-is-cloud-hsm)
[Introducing Unified Key Orchestrator](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-ukointroduce-uko)



* [Use case example](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-ukouko-use-case-example)
* [Components](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-ukoComponents)
* [What's next](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-introduce-ukouko-next)



[Monitoring the lifecycle of encryption keys in Unified Key Orchestrator](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-key-statesuko-key-states)



* [Key states and transitions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-key-statesuko-key-transitions)
* [Key states and service actions](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-key-statesuko-key-states-service-actions)
* [Monitoring for lifecycle changes](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-key-statesuko-monitor-lifecycle-changes)
* [What's next](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-key-statesuko-key-states-next)







 About cloud hardware security module - Unified Key Orchestrator Plan 

[Introducing cloud HSM - Unified Key Orchestrator Plan](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-uko-introduce-cloud-hsmuko-introduce-cloud-hsm)
* For more information see [What's new in MQ 9.2.4](https://www.ibm.com/docs/en/ibm-mq/9.2?topic=delivery-whats-new-changed-in-mq-924)









 9.2.3 r2 



 Available from 9th August 2021 



* Required security and vulnerability fixes.









 9.2.3 r1 



 Available from 22nd July 2021 



* Updated to MQ version 9.2.3
* For more information see [What's new in MQ 9.2.3](https://www.ibm.com/docs/en/ibm-mq/9.2?topic=delivery-whats-new-changed-in-mq-923)









 9.2.2 r2 



 Available from 4th May 2021 



* Required security and networking updates









 9.2.2 r1 



 Available from 25th March 2021 



* Updated to MQ version 9.2.2
* For more information see [What's new in MQ 9.2.2](https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.2.0/com.ibm.mq.pro.doc/q135080_.html)









 9.2.1 r1 



 Available from 3rd Dec 2020 



* Updated to MQ version 9.2.1
* For more information see [What's new in MQ 9.2.1](https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.2.0/com.ibm.mq.pro.doc/q134930_.html)









 9.2.0 r1 



 Available from 25th July 2020 



* Updated to MQ version 9.2.0
* For more information see [What's new in MQ 9.2.0](https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.2.0/com.ibm.mq.pro.doc/q134120_.html)
Explore related content 

You can use the following related links and samples to learn more about and interact with IBM Cloud® App ID.

Getting started? Try walking through our [video tutorials](https://www.youtube.com/playlist?list=PLzpeuWUENMK2tmzSRRx7W_mplw1x4h7ch).



 Contact us 

We’d love to hear from you with feedback and questions!



* If you have technical questions about App ID, post your question on [Stack Overflow](https://stackoverflow.com) and tag your question with "ibm-appid".
* You can reach out directly to the development team on [Slack](https://www.ibm.com/cloud/blog/announcements/get-help-with-ibm-cloud-app-id-related-questions-on-slack)!







 Introduction 

Get to know more about App ID by reading through some blogs and watching some videos!



* [Introducing App ID](https://www.youtube.com/watch?v=XlrCjHdK43Q)
* [Cloud app security - What makes a secure app?](https://www.ibm.com/blogs/cloud-archive/2017/08/cloud-app-security-makes-secure-app/)
* [Security to safeguard and monitor your apps](https://www.ibm.com/cloud/architecture/architectures/application-security-arch)
* [Add sign up and sign in to your apps with App ID](https://www.youtube.com/watch?v=cDSYNFn4rX8)
* [Technical white paper](https://www.ibm.com/cloud/blog/ibm-cloud-app-id-technical-white-paper-now-available)



Be sure that you're using version 4 of the [runtime APIs](https://www.ibm.com/blogs/cloud-archive/2019/04/ibm-cloud-app-id-v4-runtime-apis-update/).





 Securing apps 

Have a specific use case?
* [IBM operational access](https://cloud.ibm.com/docs/satellite?topic=satellite-complianceoperational-access)



* [What automated access does IBM have to my location?](https://cloud.ibm.com/docs/satellite?topic=satellite-complianceoperational-access-automated)
* [What access do IBM SREs have to my location control plane, including the masters of Satellite-enabled IBM Cloud service clusters?](https://cloud.ibm.com/docs/satellite?topic=satellite-complianceoperational-access-control-plane)
* [What access do IBM SREs have to my data and workloads that run in my Satellite-enabled IBM Cloud service clusters?](https://cloud.ibm.com/docs/satellite?topic=satellite-complianceoperational-access-workloads)
* [How can I monitor and manage IBM access into my location?](https://cloud.ibm.com/docs/satellite?topic=satellite-complianceoperational-access-monitor)
* [What happens if Satellite Link becomes unavailable? Can IBM still maintain my Satellite location?](https://cloud.ibm.com/docs/satellite?topic=satellite-complianceoperational-access-availability)



* [Digital certificates for Satellite hosts and domains](https://cloud.ibm.com/docs/satellite?topic=satellite-compliancecerts-hosts-domains)
* [Platform compliance and certification](https://cloud.ibm.com/docs/satellite?topic=satellite-complianceplatform-compliance)



* [What compliance standards does the service meet?](https://cloud.ibm.com/docs/satellite?topic=satellite-compliancecompliance-standards)
* [Which areas of security compliance am I responsible for?](https://cloud.ibm.com/docs/satellite?topic=satellite-compliancecompliance-responsibilities)
* [What are the security compliance responsibilities of Satellite-enabled IBM Cloud services?]
With Security and Compliance Center, you can now choose the location in which the data that is generated by the service is managed. To set your location preferences, you can go to the Menu icon![Menu icon](https://cloud.ibm.com/docs-content/v1/content/a6478671e8f845a84102d9cf49bf28ee7f4f3227/icons/icon_hamburger.svg)> Security and Compliance > Data Settings.

For more information, see [Storing and encrypting data in Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-mng-data).





 15 March 2021 

Customize default values for your resources
: Looking for more options to help you govern IBM Cloud resources? With Security and Compliance Center, you can now create templates that define your preferred property values for target resources in your selected IBM Cloud accounts. After you create a template and attach it to a scope, your customized defaults override the default values that are provided by IBM.

To get started with templates, you can go to the Menu icon![Menu icon](https://cloud.ibm.com/docs-content/v1/content/a6478671e8f845a84102d9cf49bf28ee7f4f3227/icons/icon_hamburger.svg)> Security and Compliance > Govern resources > Configure > Templates, or check out the [API reference](https://cloud.ibm.com/apidocs/security-compliance-config) to learn more about creating templates programmatically.

For more information, see [What is Configuration Governance?](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-rules-define)





 17 February 2021 

Manage your own encryption
: If you're using Security and Compliance Center to monitor your current posture, you can now manage your encryption settings in the Data settings tab of the service UI.