This discussion is archived
6 Replies Latest reply: Jul 25, 2012 6:44 AM by 950032 RSS

Oracle Key Manager (KMS/OKM) Forum?

trickster - oracle Newbie
Currently Being Moderated
Is there a public OKM/KMS/StorageTek Crypto Key Management System forum at Oracle?

I've not found one easily.

Can anyone point me in the direction of one, if it exists.

Thanks,
  • 1. Re: Oracle Key Manager (KMS/OKM) Forum?
    950032 Newbie
    Currently Being Moderated
    I am looking for one myself! Did you find one?
  • 2. Re: Oracle Key Manager (KMS/OKM) Forum?
    rdoogan Journeyer
    Currently Being Moderated
    http://myforums.oracle.com/jive3/forum.jspa?forumID=5014

    Thanks

    Rich
  • 3. Re: Oracle Key Manager (KMS/OKM) Forum?
    950032 Newbie
    Currently Being Moderated
    Thanks, Rob but that link doesn't work? Basically we are trying to get SNMP to work with out Tivoli system so we get notifications when there is an issue with any KMA in the cluster, particularly the offsite KMAs that are at out DR site. Right now, we get no notifications if there is an issue, and have to manually login every day to make sure the offsite KMAs are responding and the key databases are in synch. We are wondering what other OKM/KMS users do for automated monitoring, or any sort of monitoring. Please reply here or contact me at
    DAVID.VAILLANCOURTatSTATE.MA.US ( replace'at" with "@") if you have any 411 - Thanks! :)
  • 4. Re: Oracle Key Manager (KMS/OKM) Forum?
    951314 Newbie
    Currently Being Moderated
    I've been trying to find a forum myself, so please update this thread if you manage to find one.

    We currently use a KMS 2.1 cluster. I would like to know if there is a standard upgrade path to the rebranded OKM 2.5 or if it is a new product that must be purchased. We have an Oracle support contract.
  • 5. Re: Oracle Key Manager (KMS/OKM) Forum?
    rdoogan Journeyer
    Currently Being Moderated
    Odd, that link works perfectly for me and it is what the support team provided me. Maybe it's internal only for now.

    Thanks

    Rich
  • 6. Re: Oracle Key Manager (KMS/OKM) Forum?
    950032 Newbie
    Currently Being Moderated
    Yeah I tried again, it doesn't work. ANYWAYS I work for the Commonwealth of Massachusetts ITD. WE have an OKM clluster consisting of 4 KMA's - two at our data center in Boston, and the other two at our DR site at SUNGARD in New Jersey. We are trying to create an SNMP manager to work with our Tivoli monitoring system so that an alert is created automatically is there are any issues with any of the 4 KMAs or this system as a whole. Right now, the only way we have to monitor it is to log into the OKM GUI and see if they all are "responding". We had a scenario where the two KMAs in New Jersey were in a "not responding" state for TWO WEEKS and no one noticed. This means those key databases were not in synch with Boston WHICH MEANS that ALL tapes that were sent offsite during that period were unreadable without access to the encryption keys. Needless to say, from a disaster recovery perspective that this is unacceptable. The KMAs were rebooted and the databases re-synched themselves, but that situation is unacceptable and cannot be allowed to happen again. We opened a SR with Oracle, and have basically been told that the SNMP manager feature "really doesn't work well". We were asked to close the ticket and open a ticket with "professional services". This means pay us and we will help you..? So I am wondering if any OKM/KMS customers or support personnel have any solution to our monitoring issue? I asked what other customers do to monitor their OKM and was told that they log into the GUI and look. We are looking for some sort of automated solution that will work with our TIVOLI monitoring environment.
    Any ideas, please respond here or email DAVID.VAILLANCOURTatSTATEdotMAdotUS (replace at with @ and dot with .) - Thanks!! :)
    PS the Oracle SR# is SR 3-5933942091
    Support Identifier 16931713
    Serial Number 0921AK2143

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points