Quantum Scalar i6000 Quick Start Manual page 16

9 Select the KMIP link.
10 View the Cryptographic Key Server Properties. Click Edit to alter any values.
The available fields are:
-
IP - IP address(es) on which the key server is enabled on the KeySecure. We strongly recommend
that you select a specific IP address rather than using [All]. If you have multiple IP addresses
available, using a single address here enables the key server to listen for traffic on only one IP
address. This can greatly reduce system vulnerability to outside attacks.
-
Port - port on which the key server is listening for client requests. We recommend 5696 for KMIP.
-
Use SSL - required for KMIP.
-
Server Certificate - must point to a server certificate signed by a local CA.
-
Connection Timeout (sec) - specifies how long a client connect can remain idle before the key
server begins closing them. The default value is 3600, which is also the maximum.
-
Allow Key and Policy Configuration Operations - when enabled, the key server allows the
following actions:
• key creation and deletion
• key import
-
Allow Key Export - when enabled, the key server allows key export.
11 View the Authentication Settings. Click Edit to alter any values. KMIP clients must provide certificates
to connect to the KeySecure, which means the KeySecure must have access to signing CA to verify
the certificate.
Q S 6000 & S
UANTUM CALAR I
N K S Q
AFE ET EY ECURE UICK
S G
TART UIDE
19