Preparing the key encryption key file
The Stormshield KMaaS manages key encryption keys, i.e., KEKs, and stores them in the keks.json file. This file must be saved in the directory /etc/stormshield/cse.
Creating the KEK file
In RPM mode, a file template can be found in /etc/stormshield/cse to assist you.
- Create your own KEK file from the copy of the template using the following command:
# cd /etc/stormshield/cse
# cp --preserve keks.json.template keks.json
In Docker mode, the file is located in the dedicated directory you have created during installation. For more information, see Installing the Stormshield KMaaS via a Docker image.
Assigning access privileges to the file
- Assign the read and write access privileges held by the current user to the config.json file and read access to the current group:
# chmod u=rw,g=r,o= keks.json - Set stormshield-cse as the file owner.
# chown stormshield-cse keks.json
If access privileges are too permissive, a warning log will be generated when the Stormshield KMaaS starts, but will not prevent it from launching.