Pre integration steps for CipherTrust Manager

Add User

1. In the CipherTrust Manager UI, go to Access Management -> Users and create a new user.

2. Select the newly created user, click GROUPS and select the Key Users and Key Admins Group.

Registering a KMIP Client

You can register a KMIP client on the CipherTrust Manager using:

• Auto Registration

• Manual Registration

Using Auto-Registration

1. Create a registration token using the following steps:

   1. Log on to the CipherTrust Manager.

   2. Go to Access Management > Registration Tokens in the sidebar.

   3. Click Create New Registration Token.

   Copy the Registration Token once it is created.

2. Turn ON Auto Registration using the following steps:

   1. Go to Admin Settings > Interfaces.

   2. Click the ellipsis button corresponding to the kmip interface.

   3. Click Edit.

   4. Under Configure KMIP window, select Auto Registration.

   5. Paste the Registration Token.

   6. Select the mode as TLS, verify client cert, user name taken from client cert, auth request is optional.

   7. Click Update.

Using Manual Registration

1. Log on to the CipherTrust Manager.

2. Go to Products > KMIP.

3. Create Client Profile using the following steps:

   1. Go to Client Profile and click Add Profile.

   2. Add a Profile Name.

   3. Select CN in Username Location in Certificate.

   4. Click Certificate Details.

   5. Paste the content of client.csr.

   6. Click Save.

4. Create Registration Token using the following steps:

   1. Go to Registration Token and click New Registration Token > Begin.

   2. Add a Name Prefix.

   3. Click Select CA.

   4. Select CA type as Local if you are using Local CA or select external if you are using External CA.

   5. Select appropriate CA from dropdown menu and click Select Profile.

   6. Select the Client Profile from dropdown which you have created in the above step.

   7. Click Create Token.

   8. Copy the Token created and click Done.

   Note

   If you are using External CA then you can select the external CA which was created using openssl and uploaded on the CipherTrust Manager.

5. Go to Registered Clients and click Add Client.

   • Specify client name and paste the Registration Token generated in the above step.

     Note

     If you are using external CA then you need to paste the signed client certificate in the Client Certificate field.

   • Click Save to save the client certificate.