KMS - Identifying the KMS Version Being Used

Asset ID:	1-71-1020938.1
Update Date:	2011-02-22
Keywords:

Solution Type Technical Instruction Sure

Solution 1020938.1 : KMS - Identifying the KMS Version Being Used

Applies to:

Oracle Key Manager - Version: 1.1.0 and later [Release: 1.0 and later ]
All Platforms
Checked for relevance on 3-Jan-2011.

Goal

Identify the version of KMS software that is installed.
List all KMS versions already released.
List all KMS versions with associated Replication versions.

KMS 2.3 has been re-branded as OKM (Oracle Key Manager) 2.3.

Solution

Here are the commands to run to identify KMS version:

KMS 1.x
Run the command 'show_status' .

Example:

/kmsadmin@kms$ show_status
       Version: 1.2.0
       Operating mode: STANDARD
       Peer: NONE
       Database backup storage device: mounted
       GUI service: online
       GUI server: running
       GUI default locale setting: en_US.UTF-8
       Communication service: online
       Communication server: running
       PostgreSQL server: running
       Power-up self-test status: passed
       nge0: not present or unconfigured
       e1000g0: address 129.153.228.118 mask ffffff80
       e1000g1: address 10.0.0.1 mask ff000000/

KMS 2.x
The active version of the KMS software running on the KMA node can be verified
from the KMS Console or from the KMS Manager GUI.

From the KMS Console, the top display shows the KMS version and build number.

From the KMS Manager GUI, select System Management -> KMA List. This
will show the version and build number of the KMS running on the listed KMAs in the cluster.
You can also select System Management -> Local Configuration -> Software Upgrade. This
will show the build number of the KMS running on the KMA you are currently connected to.

Please note that a KMS version may have been released with a key replication schema that is
different from a previous KMS version.    The following shows the Replication version level associated
with a KMS version:

KMS version/build level KMS Replication version

Version 2.0.0 / Build 307         Replication version supported 8
Version 2.0.1 / Build 308         Replication Version 8 supported
Version 2.0.2 / Build 383.3      Replication version 8,9
Version 2.1 / Build 537.1         Replication Version 8,9,10
Version 2.2 / Builds 842.2*     Replication Version 8,9,10,11
                               842.4*
Version 2.2.1 / build 842.5       Replication Version 8,9,10,11

OKM version/build level OKM Replication version

Version 2.3 / Build 1036            Replication versions 8,9,10,11,12

Notes: 1. Build 842.2 was early release. Build 842.4 fixed 842.2 upgrade issues.
             2. Replication version can only be changed to higher level once all KMA's
                 in the cluster are running KMS version to support that version of
                 replication.
             3. To identify the replication version, refer to <Document:1178987.1>
                 How to Check the KMS Replication Version Scheme From a System Dump

KMS Tape Encryption documentations can be found in:
http://docs.sun.com/app/docs/prod/tape.encrypt?l=en#hic

Product
Sun StorageTek Crypto Key Management Station 1.0
Sun StorageTek Crypto Key Management Station 2.0
Sun StorageTek Crypto Key Management Station 2.3
Oracle Key Manager 2.3

KMA, KMS, 1.0 1.x, 2.0 2.x, Version, OKM

Attachments

This solution has no attachment