Hello Ricardo,
The default settings are fine. You don’t need any HSM or anything fancy.
What you need to do here is only add a decent encryption key, so that secrets stored by CredHub in the SQL database get properly AES256-encrypted.
Next to the “Internal Encryption Provider Keys” label, click the grey “Add” button, and input some 40-ish random characters string that you can generate with some password manager. The TAS install documentation can give you more insights:
https://docs.vmware.com/en/VMware-Tanzu-Application-Service/2.13/tas-for-vms/configure-pas.html#conf...
Happy installing, TAS and Cloud Foundry in general are fantastic pieces of technology!
Benjamin
