Network Configuration Parameters
Parameter | Default | Description |
---|---|---|
NAE_IP | No default | IP address/hostname of the CipherTrust Manager. For details, refer to Setting NAE_IP. |
NAE_Port | No default | Port of the CipherTrust Manager. Note: Clients and servers must use the same port. For details, refer to Setting NAE_Port. |
Protocol | tcp | Protocol used for communication between the client and server. Valid values: • tcp • ssl Clients and servers must use the same protocol. It can be either tcp or ssl. The ssl option uses TLSv1.2. By default, TLSv1.2 is enabled on all CipherTrust Manager(s). Recommended value is "ssl". The ssl option is mandatory for communication with KMIP compliant servers. For example, while communicating with KMIP compliant servers, you must set Protocol=ssl. Note: • If your servers are listening to SSL requests, and your clients aren’t sending SSL requests, there will be no communication between the client and the server. • It is recommended that you gradually increase security after confirming connectivity between the client and CipherTrust Manager. Once you have established a TCP connection between the client and server, it is safe to move on to SSL. Initially, configuring a client under the most stringent security constraints can complicate troubleshooting. |