kek category
This category of logs contains all the business requests concerning KEK keys.
Load action 
The load action means that a KEK key has just been loaded into the memory for use by the Stormshield KMaaS. It generates an "info" severity log in the event of success, or a "crit" severity log in the event of an error.
The log fields for this action are as follows:
|
Field |
Description |
Type |
Mandatory/Optional |
|---|---|---|---|
|
tenant_id |
Tenant identifier. Example: 025f02fe-bee2-444b-bf76-b5ead30327c0 |
String in uuid v4 format | Mandatory |
| kek_id |
Identifier of the KEK used. Example: ed7e4c13-6199-30a3-7bce-1c82a9e31e21 |
String | Mandatory |
| is_active_kek |
Indicates whether the KEK key loaded is the one used for encryption. Prescribed values:
|
Boolean | Mandatory |
| is_encrypted_kek |
Indicates whether the KEK loaded is encrypted by an MKEK. Prescribed values:
|
Boolean | Mandatory |
load_asym action
The load_asym action means that a KEK key has just been loaded into the memory for use by the KAS rewrap operation. It generates an "info" severity log in the event of success, or a "crit" severity log in the event of an error.
The log fields for this action are as follows:
|
Field |
Description |
Type |
Mandatory/Optional |
|---|---|---|---|
|
tenant_id |
Tenant identifier. Example: 025f02fe-bee2-444b-bf76-b5ead30327c0 |
String in uuid v4 format | Mandatory |
| kid |
Identifier of the KEK used. Example: ed7e4c13-6199-30a3-7bce-1c82a9e31e21 |
String | Mandatory |
| is_encrypted_kek |
Indicates whether the KEK loaded is encrypted by an MKEK. Prescribed values:
|
Boolean | Mandatory |