Add a credential for an external KMS
This type of credential allows you to access an external KMS server that you have configured.
To add a credential for an external KMS
- On the left, click Credential management.
- On the Named credentials tab, click Add and provide the following properties:
Credential name
Tag
Description (for example: This credential is used to access the external KMS.)
- Click Next.
- Select External KMS.
- Provide the credential details that are needed for authentication.
These details are used to authenticate the communication between the NetBackup primary server and the external KMS server:
Certificate - Specify the certificate file contents.
Private key - Specify the private key file contents.
CA Certificate - Specify the CA certificate file contents.
Passphrase - Enter the passphrase of the private key file.
CRL check level - Select the revocation check level for the external KMS server certificate.
CHAIN - The revocation status of all the certificates from the certificate chain are validated against the CRL.
DISABLE - Revocation check is disabled. The revocation status of the certificate is not validated against the CRL during host communication.
LEAF - The revocation status of the leaf certificate is validated against the CRL.
See the NetBackup Security and Encryption Guide for more information on external KMS configuration.
- Click Next.
- Add a role that you want to have access to the credential.
Click Add.
Select the role.
Select the credential permissions that you want the role to have.
- Click Next and follow the prompts to complete the wizard.