Workflow for external KMS configuration
For external KMS integration, centralized configuration on the NetBackup primary server is used. The primary server should establish an outbound connection with the KMIP port on the external KMS server. Configure the communication channel with external KMS on the primary server with certificate credentials. The primary server then sends all the requests to the external KMS servers on behalf of other servers such as media servers.
Table: Workflow to configure a KMS
Step number | Step | Reference topic |
|---|---|---|
Step 1 | Validate KMS credentials | |
Step 2 | Configure KMS credentials | |
Step 3 | Configure KMS | See Configuring KMS. |
Step 4 | Create keys | |
Step 5 | Configure storage | Refer to the NetBackup Administrator's Guide, Volume I. |
Step 6 | Configure policy | Refer to the NetBackup Administrator's Guide, Volume I. |