Logs relating to the connection to the KMS
The log fields described below provide information on the connection to the key management system (KMS) and the status of key encryption key (KEK) extraction.
These logs vary according to the type of cryptographic backend used: KMS REST API, or the Stormshield KMaaS.
KMS REST API
kms category
connect action
The connect action means that a connection to the KMS in REST mode has been tested. It generates an "info" severity log if the KMS is reachable, or a "warning" log if the KMS is unreachable. The fields in this log are as follows:
|
Field |
Description |
Examples |
|---|---|---|
| context.ca | Path to the certification authority | /etc/stormshield/cse/ca_kms.pem |
| context.cert |
Path to the KMS client certificate |
/etc/stormshield/cse/cert_kms.pem |
| context.host | URL of the KMS | https://web.ciphertrustmanager |
| context.port | KMS port | 443 |
| context.current_version | KMS API version | 2.2.1 |
| context.minimum_version | Minimum version supported by the Stormshield KMaaS | 2.2 |
| context.status | Connection status |
Prescribed values: "true", "false"
|
Stormshield KMaaS
These logs are shown when the service starts and when the KEKs
|
Field |
Description |
Type |
Examples |
|---|---|---|---|
|
host |
KMS address |
String |
"https://10.1.1.24" |
|
port |
KMS port |
Integer |
"5696" |
|
supported_version |
List of KMIP protocol versions supported by the KMS on which the user is connected. |
String |
Prescribed values: ["1.4","1.3","1.2","1.1","1.0"] |
| kmip_version | Version of the KMIP protocol used | String | "1.4" |
| status | Status of KEK extraction | String | Prescribed values: "started","starting", "stopped", "failure" |