KMIP and ontap integration

スネジャ — Wed, 04 Jun 2025 12:39:22 GMT

Hello,

I am looking for some help in regards to integrating ontap with External KMIP server for encryption.

I have setup the external KMIP server to store the encryption keys created by ontap.

The client certificate which needs to be installed on ontap, i have got that signed with the intermediate CA not the Root CA.

I know the procedure in case, the client certificate is signed by Root CA.

I don't know if the Intermediate CA can be used for authentication on ontap for KMIP

If anyone knows what is the procedure in case of using the Intermediate CA for Authenication please let me know.

Thanks & Regards

Re: KMIP and ontap integration

AlexDawson — Mon, 15 Apr 2019 04:55:47 GMT

Hi there!

You install the intermediate CA pubkey as you would any other certificate - using "security certificate install", as detailed at https://docs.netapp.com/ontap-9/topic/com.netapp.doc.dot-cm-cmpr-950/security__certificate__install.html

If you are converting or modifying a system already in production, I suggest you contact NetApp Support for guidance, but this is the general procedure for using chained trust certificates.

Hope this helps!

topic KMIP and ontap integration in General Discussion

KMIP and ontap integration

Re: KMIP and ontap integration