Download Oracle Key Manager - Oracle Documentation

Transcript
Internet Protocol address
IPv4 A four-byte value that identifies a device and makes it accessible through a
network. The format of an IP address is a 32-bit numeric address written as four
numbers separated by periods. Each number can be from 0 to 255.
For example, 129.80.145.23 could be an IP address.
Also known as TCP/IP address.
IPv6 The next generation uses a 128-bit value written as eight groups of four
hexadecimal characters separated by colons.
For example: 2001:0db8:85a3:0000:0000:8a2e:0370:7334.
K
Key A key in this context is a symmetric data encryption key. Agents can request
new key material for encrypting data corresponding to one or more Data Units.
A key belongs to a single Key Group so that only Agents associated with the
Key Group can access the key.
Keys have encryption and decryption cryptoperiods that are dictated by the Key
Policy associated with the Key Group of the particular key. The type of key (that
is, its length and algorithm) is specified by the Encryption Agent.
A random string of bits generated by the key management system, entered from
the keyboard, or purchased.
Key Group Key Groups are used for organizing keys and associating them with a Key
Policy. Key Groups are also used to enforce access to the key material by the
Encryption Agents.
Key Management
Appliance (KMA) A SunFire X2100-M2, X2200-M2, or X4170-M2 server preloaded with the OKM
software. The appliance is a proven, dual-core processor with a Solaris 10
operating system that delivers policy-based key management and key
provisioning services.
Key Management System
(KMS) A system providing key management. The StorageTek system has a component
providing key management on behalf of encryption agents. Now known as the
Oracle Key Manager or OKM.
Key Policy A Key Policy provides settings for the cryptoperiods to be applied to keys. Each
Key Group has a Key Policy, and a Key Policy may apply to zero or more Key
Groups. The encryption and decryption cryptoperiods specified on the policy
limit the usage of keys and trigger key life cycle events, such as the deactivation
or destructions of keys.
92 Oracle Key Manager: Systems Assurance Guide • November 2010
Revision: D • 316194806