Terminology; Configuring Key Chain Management - HP 3500yl Series Access Security Manual

Key Management System

Terminology

16-2
Terminology
■ Key Chain: A key or set of keys assigned for use by KMS-enabled
protocols. A key chain may optionally contain the time to activate and
deactivate a particular key.
Time-Independent Key: A key that has no activate or deactivate
■
time associated with it. This type of key does not expire, which
eliminates the need for a key chain.
■ Time-Dependent key: a key that has an activate and deactivate time
associated with the Accept and Send processes. Time-Dependent
keys expire, which means a key chain is needed to keep the assigned
protocols supplied with keys.
■ Key Management System (KMS) Enabled Protocol: A protocol
that uses KMS to store authentication key information.

Configuring Key Chain Management

KMS-Related CLI Commands in This Section
show key-chain < chain_name >
[ no ] key-chain chain_name
[ no ] key-chain chain_name key Key_ID
The Key Management System (KMS) has three configuration steps:
1. Create a key chain entry.
2. Assign a time-independent key or set of time-dependent keys to the Key
Chain entry. The choice of key type is based on the level of security
required for the protocol to which the key entry will be assigned.
3. Assign the key chain to a KMS-enabled protocol.
This procedure is protocol-dependent. For information on a specific protocol,
refer to the chapter covering that protocol in the Management and Configu-
ration Guide for your switch.
Page
page 16-3
page 16-3
page 16-4