Symmetric/Asymmetric Key Caching

Symmetric/asymmetric key caching allows you to store the cached keys in the process memory; these keys are not stored on disk.

How it works

1. The client requests a key from the NAE Server.

2. Enable the Symmetric_Key_Cache_Enabled or Asymmetric_Key_Cache_Enabled. If either feature is enabled, the client will search for the key in the key cache.

3. The client does not find the key in the cache.

4. The client requests the key from the Key Manager. If the user has permission and the key is exportable, the server will download the key to the client. The key is stored in the cache.

5. The client will use the local cryptographic provider listed in Local_Crypto_Provider to perform the cryptographic operations.

6. Subsequent requests for that key will utilize the key cache until the time set in Symmetric_Key_Cache_Expiry has passed.

Related parameters

• Local_Crypto_Provider

• Symmetric_Key_Cache_Enabled

• Asymmetric_Key_Cache_Enabled

• Symmetric_Key_Cache_Expiry

• Symmetric_Key_Cache_AutoRefresh_Interval