Configuring KMIP interface
You can configure a KMIP Interface using the following steps:
Go to Admin Settings > Interfaces.
On the KMIP Interface, click the action button (...) and then click Edit.
Configure KMIP popup opens.
Check Auto Registration option if you are going with Auto Registration or uncheck if you are going with the Manual Registration.
Select the mode as TLS, verify client cert, user name taken from client cert, auth request is optional.
Specify selections for Local CA for Automatic Server Certificate Generation as desired.
Note
Local CA for Automatic Server Certificate Generation should be set to Turn off auto generation from Local CA in case of External CA.
Select the CA according to your preference.
If you are using External CA then select the CA under External Trusted CAs
If you are using Local CA then select the CA under Local Trusted CAs
This step is required if you are using external CA.
Expand the Upload Certificate section:
In the Certificate field, paste the contents of Server Certificate, CA, and Server Key file in the same order. Do not introduce any space or character or symbol between the contents of these files.
Select certificate Format as PEM.
Password field is optional and can be skipped.
Click Update.
