Q
UANTUM
S
CALAR
I
6000 & S
AFE
N
ET
K
EY
S
ECURE
Q
UICK
S
TART
G
UIDE
19
9
Select the KMIP link.
10
View the Cryptographic Key Server Properties. Click
Edit
to alter any values.
The available fields are:
-
IP
- IP address(es) on which the key server is enabled on the KeySecure. We strongly recommend
that you select a
specific
IP address rather than using
[All]
. If you have multiple IP addresses
available, using a single address here enables the key server to listen for traffic on only one IP
address. This can greatly reduce system vulnerability to outside attacks.
-
Port
- port on which the key server is listening for client requests. We recommend 5696 for KMIP.
-
Use
SSL
- required for KMIP.
-
Server
Certificate
- must point to a server certificate signed by a local CA.
-
Connection
Timeout (sec)
- specifies how long a client connect can remain idle before the key
server begins closing them. The default value is 3600, which is also the maximum.
-
Allow
Key
and
Policy
Configuration
Operations
- when enabled, the key server allows the
following actions:
•
key creation and deletion
•
key import
-
Allow
Key
Export
- when enabled, the key server allows key export.
11
View the Authentication Settings. Click
Edit
to alter any values. KMIP clients must provide certificates
to connect to the KeySecure, which means the KeySecure must have access to signing CA to verify
the certificate.
