Your suggested change has been received. Thank you.

close

Suggest A Change

https://thales.na.market.dpondemand.io/docs/dpod/services/kmo….

Thales Logo

All

  • All
back

CM Connection/External CM

Configuring CM Connections using ksctl

search

Please Note:

Configuring CM Connections using ksctl

The subsequent sections explain the steps to configure the CM/external CM connections.

Create External CM Server

On the client CM, create an external CM server using the below command.

Syntax

ksctl connectionmgmt external-cm create --name <Connection-Name> --nodes-json-file <Json-File> --trusted-ca <Certificate>

Here,

  • nodes-json-file contains the hostname/IP address of the external CM.

    Note

    If the external CM is configured to use a custom port (that is, other than 443), then append the custom port to the hostname/IP address. For example, specify <hostname or IP address>:<custom-port> in the nodes-json-file file.

  • trusted-ca is the root CA of the external CM.

Example Request

ksctl connectionmgmt external-cm create --name "ext-cm" --nodes-json-file ./nodes.json --trusted-ca ./trustedCA.json

nodes.json

[
    {
        "hostname":"3.85.100.8"
    }
]

trustedCA.json

[
    {
        "certificate":"-----BEGIN CERTIFICATE-----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\n5GFtSB1JgSD0+NRYLa73bryL\n-----END CERTIFICATE-----"
    }
]

Example Response

{
        "id": "33a9ba2a-638a-46ef-b13d-521634c22d0d",
        "uri": "kylo:kylo:connectionmgmt:external-cm:test3-33a9ba2a-638a-46ef-b13d-521634c22d0d",
        "account": "kylo:kylo:admin:accounts:kylo",
        "createdAt": "2023-02-21T07:02:43.483599381Z",
        "name": "ext-cm"
        "nodes": [
                {
                        "id": "47096049-c256-4e5e-b2ff-2ac9eac0731d",
                        "uri": "kylo:kylo:connectionmgmt:cm-node:test3-47096049-c256-4e5e-b2ff-2ac9eac0731d",
                        "account": "kylo:kylo:admin:accounts:kylo",
                        "createdAt": "2023-02-21T07:02:43.488838252Z",
                        "hostname": "3.85.100.8",
                        "external_cm_id": "33a9ba2a-638a-46ef-b13d-521634c22d0d"
                }
        ],
        "trusted_ca": [
                {
                        "id": "ac663bce-cc96-4d52-8dd0-16a894513d12",
                        "uri": "kylo:kylo:connectionmgmt:cm-ca:test3-ac663bce-cc96-4d52-8dd0-16a894513d12",
                        "account": "kylo:kylo:admin:accounts:kylo",
                        "createdAt": "2023-02-21T07:02:43.491888443Z",
                        "certificate": "-----BEGIN CERTIFICATE-----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\n5GFtSB1JgSD0+NRYLa73bryL\n-----END CERTIFICATE-----",
                        "external_cm_id": "33a9ba2a-638a-46ef-b13d-521634c22d0d",
                        "subject_dn": "CN=CipherTrust Root CA,O=Thales,L=Austin,ST=TX,C=US",
                        "expires_at": "2033-01-21T11:39:54Z"
                }
        ]
}

The response returns external_cm_id. In the above example, 33a9ba2a-638a-46ef-b13d-521634c22d0d is the external_cm_id.

After the external CM server is created, you can manage these connections using ksctl.

Establish Connection between Client CM and External CM

This section describes the steps required to establish a connection between a client CM and an external CM.

Prerequisites

Before creating a CM connection, register client on external CM that includes the following steps:

  1. Create CSR on client CM.

    ksctl connectionmgmt connections csr --cn <Common-Name> --csr-outfile <Filename>

  2. Generate registration token on external CM.

    ksctl clientmgmt tokens create --ca-id <CA-ID>

    Note

    If you are generating the registration token with an external CA, you first need to upload the external CA. Use the following command.

    ksctl ca externals upload --cert-infile <Filename>

  3. Register client on external CM.

    ksctl clientmgmt clients register --reg-token <Reg-Token> --csr <CSR>

    The response will return the following resources:

    • client id (client-id)

    • client certificate (client-cert-file)

Steps

To create a CM connection on Client CM, run:

Syntax

ksctl connectionmgmt cm create --name <Connection-Name> --products <Products-Names> --meta <Key-Values> --client-cert-file <Client-Certificate-File> --client-id <Client-ID> --external-cm-id <External-CM-ID>

Here,

  • name - unique name for CM connection

  • client-cert-file - client certificate (generated in the Prerequisites section)

  • client-id - client-id (generated in the Prerequisites section)

  • external-cm-id- external-cm-id (generated in the Create External CM Server section)

Note

If the external CipherTrust Manager is in a clustered environment, the external CipherTrust Manager administrator adds the client to the group (Cluster Info Viewers), so that client CipherTrust Manager can read the cluster information.

Example Request

ksctl connectionmgmt cm create --name "connection_1_CM" --products "cckm" --client-cert-file ./clientCert.pem --client-id "008c52be-4d26-40b2-a41f-a86da534107e" --external-cm-id "33a9ba2a-638a-46ef-b13d-521634c22d0d"

Example Response

{
    "id": "fc01d709-7b2a-4235-87fe-6cdd20f1f22a",
    "external_cm_id": "33a9ba2a-638a-46ef-b13d-521634c22d0d",
    "uri": "kylo:kylo:connectionmgmt:connections:connection-1-cm-fc01d709-7b2a-4235-87fe-6cdd20f1f22a",
    "account": "kylo:kylo:admin:accounts:kylo",
    "createdAt": "2023-04-19T10:20:16.124632296Z",
    "updatedAt": "2023-04-19T10:20:16.122916547Z",
    "service": "CM",
    "category": "KeyManager",
    "last_connection_ok": null,
    "last_connection_at": "0001-01-01T00:00:00Z",
    "name": "connection_1_CM",
    "products": [
        "cckm"
    ],
    "client_certificate": "-----BEGIN CERTIFICATE-----\nMIIFgzCCA2ugAwIBAgIRAIYB4m8ecQQtl4eP3xNseBUwDQYJKoZIhvcNAQELBQAw\nWjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlRYMQ8wDQYDVQQHEwZBdXN0aW4xDzAN\nBgNVBAoTBlRoYWxlczEcMBoGA1UEAxMTQ2lwaGVyVHJ1c3QgUm9vdCBDQTAeFw0y\nMzA0MTgxMDE0NDJaFw0yNTA0MTgxMDE0NDJaMIGTMQswCQYDVQQGEwJVUzELMAkG\nA1UECBMCTUQxEDAOBgNVBAcTB0JlbGNhbXAxFTATBgNVBAoTDFRoYWxlcyBHcm91\ncDEMMAoGA1UECxMDUm5EMREwDwYDVQQDEwhreWxvLmNvbTEtMCsGA1UELhMkMDA4\nYzUyYmUtNGQyNi00MGIyLWE0MWYtYTg2ZGE1MzQxMDdlMIIBIjANBgkqhkiG9w0B\nAQEFAAOCAQ8AMIIBCgKCAQEAur6M7t4Z7cGTMQP0qJIk4LgsA0Erf1RujWwVDE1J\nAV3B1BL3mlnPrZm1Mu6U5sTU5eTLlT+HE+nRxWYPJ4Wed5GtZ/cBrWh4Z7IcP5Wl\nq9qXioiYL7hKnfGRHGJ4+WpueezR6HYoZSX/G5svEYd+sDi/4O73F1vx8pIkd0wR\nH4a74EQO7y2SsDKGwnndQFJCQjZlizuKBBQeNFi+pTU70AdDiEaZkt6/sIxFeVSn\nPhjIcq/HW9lzGYxGtIfcznsTQAyOjKn6wc/hC3c33IcNRRQPg+MPPyjZJswyGdju\nnlZNNQxRyrDV2HS+DO0PjS+bTxE8v68ejeHbuLvskOUQqwIDAQABo4IBCDCCAQQw\nDgYDVR0PAQH/BAQDAgOIMBMGA1UdJQQMMAoGCCsGAQUFBwMCMAwGA1UdEwEB/wQC\nMAAwHwYDVR0jBBgwFoAUWdYFoqjVth/meouD25TsPe1pfnEwTgYDVR0RBEcwRYIR\nKi50aGFsZXNncm91cC5jb22CESoudGhhbGVzZ3JvdXAubmV0gRdjb250YWN0QHRo\nYWxlc2dyb3VwLmNvbYcEAQEBATBeBgNVHR8EVzBVMFOgUaBPhk1odHRwOi8vY2lw\naGVydHJ1c3RtYW5hZ2VyLmxvY2FsL2NybHMvNDA2MmVlNWMtZTMwNi00ODkzLWI5\nYjItMzFmNWZiY2NiYjY4LmNybDANBgkqhkiG9w0BAQsFAAOCAgEAVFXX69fNsMoB\nCLEflrfaAB2uHjRvdjS1nkWrNT5fWzD37ig85w70aYLH3yfdglHP4XilKEqMoX2E\nkC2NFSsA9JpwpYV3ZkZk9Q6oJBxUwg9ploxF3KJ/t6TkHR53ZY4qhak+fVXfjrBq\nHAoXusC4inIGYPc6x9OoWAqJjZBJTHICOxOux4VD9i1hTrOGrMCTsRkG+WFBU3Zp\n2DcwufZoSTNV/I8xHhqfSHiaTaeOJozG2Aoq3P06AT0JaphbJ1tJBTnua4ceA+/h\nJjwsC1Xuc6fHu+OQL2MxOC8DrCeP2tQc95KWrVb7WJJCeVu6To+Zto0m/Jc6rrne\nmu5D9Tnv/cmDfjPQk1EVf/IsL+baHpEDf9399ZI6w8WvU45IanYYBSMtRaHnKesa\n8k1bjWHZnWvG4ZTbOawX0q5LMkB+1Ee/8YxDvy3RlCRcGQGh+sPwgj0L/XzdAvK6\ne9mjs2nzpZF37Ns4UiaHUo44XZJDIkes8cqUpJhiqjPo/YPPeUqMGjucpCeIqKlh\nZoio6d8h3WddvsIIv+ygkAnUeVtiq0M2lwUKtKEBo+i8iXL3rctGCyPF5hQkRXWS\nu5hiVl9frMKTuE4X7FQIEPrZ1cPwsnfcQsMpZf5Mwbbwm/Ych9rrqWanYNAq+PVg\n7U4C7GwJZYDD3349pO7g4CasiYSCorI=\n-----END CERTIFICATE-----\n",
    "client_id": "008c52be-4d26-40b2-a41f-a86da534107e",
    "nodes": [
        {
            "id": "efec26ad-f9f1-44d0-850f-be2cc3ed54d0",
            "uri": "kylo:kylo:connectionmgmt:cm-node:test2-efec26ad-f9f1-44d0-850f-be2cc3ed54d0",
            "account": "kylo:kylo:admin:accounts:kylo",
            "createdAt": "2023-04-19T10:03:02.532367Z",
            "hostname": "54.173.227.108",
            "external_cm_id": "33a9ba2a-638a-46ef-b13d-521634c22d0d"
        }
    ],
    "trusted_ca": [
        {
            "id": "fe92910f-98c4-4dd4-bdf0-f39a2160d5b5",
            "uri": "kylo:kylo:connectionmgmt:cm-ca:test2-fe92910f-98c4-4dd4-bdf0-f39a2160d5b5",
            "account": "kylo:kylo:admin:accounts:kylo",
            "createdAt": "2023-04-19T10:03:02.533998Z",
            "certificate": "-----BEGIN CERTIFICATE-----\nMIIFrzCCA5egAwIBAgIRAIDguiVeBLRGPRQUEerSkYEwDQYJKoZIhvcNAQELBQAw\nWjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlRYMQ8wDQYDVQQHEwZBdXN0aW4xDzAN\nBgNVBAoTBlRoYWxlczEcMBoGA1UEAxMTQ2lwaGVyVHJ1c3QgUm9vdCBDQTAeFw0y\nMzA0MTcwMjEyMTFaFw0zMzA0MTUwMjEyMTFaMFoxCzAJBgNVBAYTAlVTMQswCQYD\nVQQIEwJUWDEPMA0GA1UEBxMGQXVzdGluMQ8wDQYDVQQKEwZUaGFsZXMxHDAaBgNV\nBAMTE0NpcGhlclRydXN0IFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw\nggIKAoICAQCwz0QtPo+cFY2glDdusXMhkrVgv0bMGf9eXqgLOQ+8PsAoDvLg43AU\nAx7dDKvd73L1DsQmOwqeslx3bS3deBR2zyCfhy6tP1iL2iILsPuzJZqTzyu0+Sfs\nrnwplwM1oZE0E0QkkCM8vx0l7gn2plhx8CU9cu/s9Dbe1fcBFbqLURkDN3U3pTeo\nmAChjTQSVQwN6ZcpIEdAycRaUL9+AKt6/k9DjusQpNJkMtJjY4OYp5j6JGAgFdcK\nufzjsVzb16EEMu6yyXi/P/QXT8+7zwJdaocT80kMRrnIYvmLwjCNo3kZpvXLsE1G\nHPgNbzdbQgVT2afLeGKtMI1sRdoKII8gvEBdeO9NMyD/+VeY0Yop+hOSqPP/XQbF\ndtVenqKUG/6mq3Z6cz92R0R/Sw9KNnDixFa0cy4KAZhS2mn9E8HrTfwzn6mZiWbl\n3zehiyMN2eyOB1sAfJwL04D6bZYDWDlNnf/XXLChhkzUFImeA5QkYiPg0ZgNOGaD\nkveQbaog26ui4REaJm0cTjOnzIyRwl14iQ0OdDlrBcasgpDFMNMzsYEFmunPfLxK\n90+rgzlXXcowl7ZYIYwjcoc1IqPPNhjx2pHlkuYe8XXusRsuBEuHmg3eL+SpfsHE\nHnJn64ddofDqSGZ/4lJGYvcCVTE02jAa5olhOCl6fcV+y44xc/yZwwIDAQABo3Aw\nbjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWdYF\noqjVth/meouD25TsPe1pfnEwLAYDVR0RBCUwI4EhdGVjaG5pY2FsLnN1cHBvcnRA\ndGhhbGVzZ3JvdXAuY29tMA0GCSqGSIb3DQEBCwUAA4ICAQBz8a2KZo1MnkmD5w4I\nH7XpHsQ6cGlzYH72P5jik+6EHEkHHPXITvRj8nAW7nsXAZPLjjaJLJy46r94GYZN\neIY7PGgoRTdwRsSTPTmTc6cw/ZgJd5hWukKe0D1C15Lo7k87KV3CVh9aH28R1sEe\nFxY52b44qa/dZFAxUU5meXYFI/5lrzMvDZ7gTVQWhR0FFz5b8OcG0HupJQe/xson\nppERSDYLm4R6eDQ/kqQelFDEa3s8EUob3BQtPYWNMRPowlVOwir74XtXk9K4cPml\nz3tYZm4CqPLNtDiRmp3Qob/5EXzkgD7HdVzY7UkcZg5vTGZhIxHPZ4dCDE1xgEBS\n2IIpO05IEp3LBG9bqps4UlfMN7MjQf2mGlAoLhHA0mvVosAeawRmPQh8Ydvtk6mQ\n9HxmMk+WgOVuO6V/eYocXX0D7DYwJXWreFjRcpCtnpe0zOyzEdic025NoCM8yNa1\n3b889t5aXYFeZEI4bHu7IKYh0poGQyIPsN775UdmU3QU1XfghLx7s+faeooO1t18\ncnfbvrwZm++85Awb1caoOjuEeJj2h6xv5eRDpzC6F57pka80hNlmhCbMmbQFgjrE\nveC9pkn8Yf79RYC3HzRGgsOnoEdadlmibfF0MO18M2l+aEubChK1Btb1Z6F4Azje\n8RccyyfNBjhxQa73QAoaKHz02A==\n-----END CERTIFICATE-----",
            "external_cm_id": "4df54fb4-d3e6-432d-a917-4b587b180b05",
            "subject_dn": "CN=CipherTrust Root CA,O=Thales,L=Austin,ST=TX,C=US",
            "expires_at": "2033-04-15T02:12:11Z"
        }
    ]
}

After the CM connection is created, you can manage these connections using ksctl.

On this page