Connection Manager
The Connection Manager contains a list of all connections to the resources that are external to the CipherTrust Manager server. Any resource that you intend to use with CipherTrust Manager and that resides outside of the CipherTrust Manager infrastructure has to be added using the Connection Manager.
In the first phase of the Connection Manager implementation, only the connections for CipherTrust Cloud Key Manager (CCKM) to Amazon Web Services (AWS) and Microsoft Azure will be configured from there. Both are cloud computing platforms and CCKM manages cloud keys for those cloud services.
Note
A CCKM administrator requires the Connection Admins permission to add, edit, or delete a connection for CCKM.
Accessing the Connection Manager
To access the Connection Manager, log in to CipherTrust Manager as administrator. Next, click Keys & Access Management on the main screen, and then select Connections from the sidebar on the left.
The Connections Management screen is displayed. The tabular view lists all the currently configured connections. You can arrange the list in different orders, by clicking on the column headers to sort it by that column. The table has the following columns:
Name - the name of the connection
Creation - the date when the connection was created
Type - the type of connection (currently, only AWS or Azure)
Products - the name of the product that uses the connection (currently, only CCKM)
State - the state that the connection is in. It is one of these states:
Not tested - the connection has not been tested
Fail - the connection has been tested and the test failed. The date when the connection failed is displayed to the right
Ready - the connection is properly configured and ready
The last column contains an ellipsis button (...) which, when you click it, displays a menu that allows you to edit or delete the corresponding connection.
Use the filters in the column headers to filter through multiple connections and display only those that you wish to display.
Use the Search box to search for a specific connection.
Click the + Add Connection button to add a new connection.
Adding a New Connection
Note
Before adding a new AWS connection, ensure that time on the CipherTrust Manager and AWS is in sync. To change the time on the CipherTrust Manager, use the NTP server or run the date
or timedatectl
command.
Click the + Add Connection button to open the Add Connection wizard. The wizard consists of these four steps:
1. Select Store Type
In the Select Category section, click one of the tiles. For now, only a Cloud type category is available.
From the Select Cloud Type menu select AWS or Azure. Click Next to move on to the next step.
2. General Info
In this step provide a Name and Description (optional) for the new connection. Click Next to move on to the next step.
3. Configure Connection
In this step you configure your connection. Depending on the cloud type that you selected in step one - AWS or Azure - certain options may look slightly different.
The following table lists the available connections. Click the connection to know the configuration details.
Amazon Web Services (AWS) | Microsoft Azure |
4. Add Products
Use the checkboxes in the Products list to select a product associated with the connection. Currently, only CipherTrust Cloud Key Manager (CCKM) is supported.
Click Save to save your connection. The new connection is now listed in the Connections Management table.
Editing a Connection
Navigate to the Connections Management screen and find a connection that you want to edit.
Click the ellipsis button (...) to display a pop-up menu.
Select Edit from the menu.
Go over the steps of the connection wizard and update the connection as desired.
Deleting a Connection
Navigate to the Connections Management screen and find a connection that you want to delete.
Click the ellipsis button (...) to display a pop-up menu.
Select Delete from the menu.
The connection is removed from the list of connections.