Skip to main content
A newer release of this product is available.

View KMS details

Contributors netapp-madkat netapp-perveilerk
PDFs

You can view information about each key management server (KMS) in your StorageGRID system, including the current status of the server and client certificates.

Steps

  1. Select CONFIGURATION > Security > Key management server.

    The Key Management Server page appears. The Configuration Details tab shows any key management servers that are configured.

    KMS Configuration Details KMS Table

  2. Review the information in the table for each KMS.

    Field Description

    KMS Display Name

    The descriptive name of the KMS.

    Key Name

    The key alias for the StorageGRID client in the KMS.

    Manages keys for

    The StorageGRID site associated with the KMS.

    This field displays the name of a specific StorageGRID site or Sites not managed by another KMS (default KMS).

    Hostname

    The fully qualified domain name or IP address of the KMS.

    If there is a cluster of two key management servers, the fully qualified domain name or IP address of both servers are listed. If there are more than two key management servers in a cluster, the fully qualified domain name or IP address of the first KMS is listed along with the number of additional key management servers in the cluster.

    For example: 10.10.10.10 and 10.10.10.11 or 10.10.10.10 and 2 others.

    To view all hostnames in a cluster, select a KMS and then select Edit.

    Certificate Status

    Current state of the server certificate, optional CA certificate, and the client certificate: valid, expired, nearing expiration, or unknown.

    Note: It might take StorageGRID as long as 30 minutes to get updates to the certificate status. You must refresh your web browser to see the current values.

  3. If the Certificate Status is Unknown, wait up to 30 minutes and then refresh your web browser.

    Note Immediately after you add a KMS, the certificate status on the Key Management Server page appears as Unknown. It might take StorageGRID as long as 30 minutes to get the actual status of each certificate. You must refresh your web browser to see the actual status.

  4. If the Certificate Status column indicates that a certificate has expired or is nearing expiration, address the issue as soon as possible.

    See the recommended actions for the KMS CA certificate expiration, KMS client certificate expiration, and KMS server certificate expiration alerts in the instructions for monitoring and troubleshooting StorageGRID.

    Important You must address any certificate issues as soon as possible to maintain data access.