Differences Between Key Managers
The XML interface is a protocol for communication between the CipherTrust Manager's Network-Attached Encryption (NAE) Server and a client.
The APIs used by the CipherTrust Manager are similar to the APIs used in the Keysecure Classic. This section lists the API parameters that have similar names and work similarly, but have different syntax.
| Parameter/Request | CipherTrust Manager | KeySecure Classic |
|---|---|---|
| CAName | ID of the certificate authority. Applicable for: • CertificateSignRequest • CAExportRequest | Name of the certificate authority. Applicable for: • CertificateSignRequest • CAExportRequest |
| CertificateName | Contains the Certificate ID of the certificate to be exported. Applicable for: • CertificateExportRequest | Contains the name of the certificate to be exported. Applicable for: • CertificateExportRequest |
| RecordEventRequest | Logs generated using the RecordEventRequest can be accessed by following ways: • via ssh at the following location: /opt/keysecure/logs• Can be downloaded using the UI. | Logs message to the SafeNet KeySecure's client event log. |
| Passwd | The specified password must adhere to the CipherTrust Manager's password policy. The default policy is as follows: The password must: • Be more than 8 and less than 30 characters• Contain at least one uppercase character ( A, B, and C etc.)• Contain at least one lowercase character ( a, b, and c etc.)• Contain at least one numerical digit ( 1, 2, and 3 etc.)• Contain at least one special character ( !@ and _ etc.)Applicable for: • UserCreateRequest • UserModifyRequest | The specified password must adhere to the KeySecure Classic's password policy. The default policy is as follows: The password must: • Be less than 256 characters• Contain at least five different characters • Not contain a less than character( <), or a tab.• Not resemble a phone number, dictionary word, or reversed dictionary word • Not contain more than four instances of sequential characters Applicable for: • UserCreateRequest • UserModifyRequest |
