Download Oracle Key Manager - Oracle Documentation
Transcript
Internet Protocol address IPv4 A four-byte value that identifies a device and makes it accessible through a network. The format of an IP address is a 32-bit numeric address written as four numbers separated by periods. Each number can be from 0 to 255. For example, 129.80.145.23 could be an IP address. Also known as TCP/IP address. IPv6 The next generation uses a 128-bit value written as eight groups of four hexadecimal characters separated by colons. For example: 2001:0db8:85a3:0000:0000:8a2e:0370:7334. K Key A key in this context is a symmetric data encryption key. Agents can request new key material for encrypting data corresponding to one or more Data Units. A key belongs to a single Key Group so that only Agents associated with the Key Group can access the key. Keys have encryption and decryption cryptoperiods that are dictated by the Key Policy associated with the Key Group of the particular key. The type of key (that is, its length and algorithm) is specified by the Encryption Agent. A random string of bits generated by the key management system, entered from the keyboard, or purchased. Key Group Key Groups are used for organizing keys and associating them with a Key Policy. Key Groups are also used to enforce access to the key material by the Encryption Agents. Key Management Appliance (KMA) A SunFire X2100-M2, X2200-M2, or X4170-M2 server preloaded with the OKM software. The appliance is a proven, dual-core processor with a Solaris 10 operating system that delivers policy-based key management and key provisioning services. Key Management System (KMS) A system providing key management. The StorageTek system has a component providing key management on behalf of encryption agents. Now known as the Oracle Key Manager or OKM. Key Policy A Key Policy provides settings for the cryptoperiods to be applied to keys. Each Key Group has a Key Policy, and a Key Policy may apply to zero or more Key Groups. The encryption and decryption cryptoperiods specified on the policy limit the usage of keys and trigger key life cycle events, such as the deactivation or destructions of keys. 92 Oracle Key Manager: Systems Assurance Guide • November 2010 Revision: D • 316194806