Bringing together the Apache Cassandra experts from the community and DataStax.

Want to learn? Have a question? Want to share your expertise? You are in the right place!

Not sure where to begin? Getting Started

 

question

vamsee21 avatar image
vamsee21 asked Erick Ramirez commented

SSL exception while setting up KMIP server

Requirement : We have to enable the encrption in DataStax with KMIP server.

1. I added the KMIP host details to dse.yaml file .

2. Through the Hashi corp vault KMIP server generate the Public key and private key.

3. using public key I created the kmip_truststore.jks
4.Whiele generate the truststore.jks using dse document (https://docs.datastax.com/en/security/6.7/security/secEncryptExternalKeys.html#secExternalKeyTS)
Can you please share the suggesstion.

kmip
10 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

1 Answer

Erick Ramirez avatar image
Erick Ramirez answered Erick Ramirez commented

You will need to use the Java keytool utility to generate PEM files. There's an example in the KMIP encryption options of the DSE configuration doc page.

If you have any follow up questions, please log a ticket with DataStax Support so one of our engineers can assist you directly. Cheers!

4 comments Share
10 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Thank you for your response Erick,

1. while adding KMIP host details first point.

2.Download and setup the KMIP agent

I could not find the proper documentation for it.
Can you please share the documentation.


0 Likes 0 ·

You'll need to contact your KMIP vendor for details of how to configure the KMIP server and agents. Cheers!

1 Like 1 ·
vamsee21 avatar image vamsee21 Erick Ramirez ♦♦ ·

Thank yoiu for your Reply


0 Likes 0 ·
Show more comments