Checking system health

After you have installed and run the Stormshield KMaaS, check that it is running correctly.

1. Use the status API route:

   curl -H "Origin: <origin_url>" <my-cse-full-url>/status
   

   where:

   Parameter	Value
   <origin_url>	The Stormshield KMaaS enforces across-origin resource sharing (CORS) rule to guarantee that requests genuinely originate from the Google API. This rule makes it possible to verify the origin HTTP header. The origins that are allowed are all URLs of https://*.google.com type, for example: https://client-side-encryption.google.com https://admin.google.com Requests containing an incorrect origin header are rejected. For more information, refer to the Google documentation Connect to your identity provider for client-side encryption.
   <my-cse-full-url>	Full URL specified for the external key service. For more information, refer to Configuring Google Workspace Client-side encryption.

   EXAMPLE
   curl -H "Origin: https://client-side-encryption.google.com" https://cse.example.com/api/v1/a4670b0-4bc11-4290-a5bd-498c2e1fb0b/status

2. If the system is running correctly, the status API return must be in the following form:

   {"server_type":"KACLS","vendor_id":"Stormshield","version":"4.3.0.2354","name":"name of my CSE","operations_supported":["wrap","unwrap","digest","rewrap","privilegedwrap","privilegedunwrap","wrapprivatekey","privatekeysign","privatekeydecrypt","privilegedprivatekeydecrypt"]}