OKM 키 저장소 암호화 구성(CLI)

OKM(Oracle Key Manager) 키 저장소를 사용하려면 다음 매개변수를 구성합니다.

• agent_id

• registration_pin(OKM 보안 책임자가 제공함)

• server_addr

암호화 등록 정보에 대한 자세한 내용은 암호화 등록 정보를 참조하십시오.

1. OKM 키 저장소 암호화를 구성하려면 다음 CLI 명령을 사용합니다.

   hostname:> shares encryption
   hostname:shares encryption> show
   Children:
                                okm => Manage encryption keys
                              local => Manage encryption keys
   
   hostname:shares encryption> okm
   hostname:shares encryption okm> show
   Properties:
                        agent_id = ExternalClient041
                registration_pin = *********
                     server_addr = 10.80.180.109
   
   Children:
                               keys => Manage this Keystore's Keys
   

2. OKM 키를 만들려면 다음 CLI 명령을 사용합니다.

   hostname:shares (pool-290-A) encryption okm keys>
   hostname:shares (pool-290-A) encryption okm keys> create
   hostname:shares (pool-290-A) encryption okm key-372 (uncommitted)> ls
   Properties:
                          cipher = AES
                         keyname = (unset)
   hostname:shares (pool-290-A) encryption okm key-372 (uncommitted)> set
   keyname=anykey
                         keyname = anykey (uncommitted)
   hostname:shares (pool-290-A) encryption okm key-372 (uncommitted)> commit