Configuring tokens and drivers

Keystone supports customizable token providers that can be defined within the [token] section of the configuration file. Keystone provides UUID, PKI, and Fernet token providers. In this installation, the Fernet token provider will be used. Update the [token] section in the /etc/keystone/keystone.conf file accordingly:

[token]
...
provider = fernet 

Populate the Keystone database using the keystone-manage utility:

    # su -s /bin/sh -c "keystone-manage db_sync" keystone

Initialize the Fernet key repositories with the following commands:

    # keystone-manage fernet_setup
     --keystone-user keystone --keystone-group keystone
    # keystone-manage credential_setup
     --keystone-user keystone --keystone-group keystone