HP Secure Key Manager - Manual (Page 186)

Key Management Services Configuration sections
The Key Management Services Configuration page enables you to configure the KMS Server, KMS
Server Authentication Settings, and the user account lockout settings. This page contains the following
KMS Server-related sections:
• KMS Server Settings
• KMS Server Authentication Settings
• User Account Lockout Settings
KMS Server Settings
Use the KMS Server Settings section to set up the basic KMS Server settings.
Figure 100 Viewing the KMS Server Settings section
The following table describes the components of the KMS Server Settings section.
Table 81 KMS Server Settings section components
Description Component
This field specifies the IP address(es) on which the KMS Server is enabled on the SKM.
The drop-down box consists of all IP addresses bound to the SKM.
IMPORTANT:
We strongly recommend that you select a specific IP address instead of specifying
[All]. If you have four IP addresses bound to the SKM, then the KMS Server listens
for traffic on four different IP addresses; whereas, if you specify a single IP
address, the KMS Server listens for traffic on only one IP address. This can greatly
reduce system vulnerability to outside attacks.
IP
Port on which the KMS Server is listening for client requests. The default port is 9000;
however, you can use any available port.
Port
Specify whether you want to require that clients connect to the KMS Server using an
SSL connection. A check mark in the box indicates that the KMS Server only accepts
traffic on an SSL connection. If the Use SSL option is not enabled, the KMS Server will
not accept SSL connections.
Use SSL
If you are requiring SSL, you must provide the certificate that will be used to authenticate
the KMS Server to clients.
Server Certificate
Using the Management Console 186