Logs relating to KEK management

The log fields described below relate to KEK management.

keks category

connect action

The connect action means that a connection to the KMS in REST mode has been tested. It generates an "info" severity log. The fields in this log are as follows:

Field	Description	Examples
persistence_type	Mode used for storing KEKs.	"kms", "json_file"
auto_refresh	Information on automatic KEK refresh: enabled/disabled, and refresh frequency in seconds.	"auto_refresh": { "enabled": true, "interval_seconds":86400, }
resource	IP address of the KMS, or URI of the keks.json file where the KEKs are located.	"file:///etc/stormshield/cse/keks.json"

Field

Description

Examples

persistence_type

Mode used for storing KEKs.

"kms", "json_file"

auto_refresh

Information on automatic KEK refresh: enabled/disabled, and refresh frequency in seconds.

"auto_refresh": {

"enabled": true,

"interval_seconds":86400,

}

resource

IP address of the KMS, or URI of the keks.json file where the KEKs are located.

"file:///etc/stormshield/cse/keks.json"

load action

The load action means that KEK retrieval has been triggered. It generates an "info" severity log. The fields in this log are as follows:

Field	Description	Examples
persistence_type	Mode used for storing KEKs.	"kms", "json_file"
resource	IP address of the KMS, or URI of the keks.json file where the KEKs are located.	"file:///etc/stormshield/cse/keks.json"
reason	Reason for triggering KEK retrieval. The possible values are: "initialization" if the KEKs are loaded at application startup "scheduled" if the KEKs are loaded following a scheduled refresh

Field

Description

Examples

persistence_type

Mode used for storing KEKs.

"kms", "json_file"

resource

IP address of the KMS, or URI of the keks.json file where the KEKs are located.

"file:///etc/stormshield/cse/keks.json"

reason

Reason for triggering KEK retrieval.

The possible values are:

"initialization" if the KEKs are loaded at application startup
"scheduled" if the KEKs are loaded following a scheduled refresh

setup action

The setup action means that KEK refresh and KEK storing mode have been configured. It generates an "info" severity log. The fields in this log are as follows:

Field	Description	Examples
persistence_type	Mode used for storing KEKs.	"kms", "json_file"
resource	IP address of the KMS, or URI of the keks.json file where the KEKs are located.	"file:///etc/stormshield/cse/keks.json"
auto_refresh	Information about: Periodic KEK refresh: enabled/disabled, and refresh frequency in seconds. Minimum interval between two refresh operations, whether periodic or one-off.	"auto_refresh": { "scheduled": { "enabled": true, "interval_seconds":86400 } "minimum_interval_seconds": 1800 }

Field

Description

Examples

persistence_type

Mode used for storing KEKs.

"kms", "json_file"

resource

IP address of the KMS, or URI of the keks.json file where the KEKs are located.

"file:///etc/stormshield/cse/keks.json"

auto_refresh

Information about:

Periodic KEK refresh: enabled/disabled, and refresh frequency in seconds.
Minimum interval between two refresh operations, whether periodic or one-off.

"auto_refresh": {

"scheduled": {

"enabled": true,

"interval_seconds":86400

}

"minimum_interval_seconds": 1800

}

kek category

load action

The load action means that a KEK has been loaded in the Stormshield KMaaS memory. It generates an "info" severity log. The fields in this log are as follows:

Field	Description	Examples
kek_id	Unique identifier of the KEK used.	"bbc9cd0b-803c-4d9c-93f9-b43bdfc0bf96"
is_active_kek	Indicates if the KEK is the active encryption key for the tenant. The possible values are "true" and "false".
persistence_type	Mode used for storing KEKs.	"kms", "json_file"
resource	IP address of the KMS, or URI of the keks.json file where the KEKs are located.	"file:///etc/stormshield/cse/keks.json"