RE: [kmip] Groups - Device Credential (KMIP Usage Guide Proposal onDevice Credentials v2.doc) uploaded

["Lockhart, Robert" <Robert.Lockhart@thalesesec.com>]

My only comment is on the requirements of a device identifier.  A device credential should only require one of four of the listed attributes and not just the serial number because there are devices out there that don't have a unique serial number associated with them (e.g. they make use of the serial number of the proxy device or some other device such that encryption end point devices share a common serial number provided by a controller of some sort).  This gets even more fun in devices that support multiple systems using one end point device but needs to use a different logical device where only a single serial number or network address is available.

I would modify serial number, machine identifier, network identifier and media identifier as any one of the four are required as long as they are unique in a given environment.  I would leave password as not required. Lastly to date I have not seen a good reason that a proxy or a device need know about groups unless someone can provide a solid use case for it I suggest removing it for simplification.

Bob L.
________________________________________
From: garnold@us.ibm.com [garnold@us.ibm.com]
Sent: Wednesday, June 29, 2011 09:12
To: kmip@lists.oasis-open.org
Subject: [kmip] Groups - Device Credential (KMIP Usage Guide Proposal on Device Credentials   v2.doc) uploaded

Device credential specifics - minimal changes focused on the V1.1
specification.

 -- Mr. Gordon Arnold

The document named Device Credential (KMIP Usage Guide Proposal on Device
Credentials v2.doc) has been submitted by Mr. Gordon Arnold to the OASIS
Key Management Interoperability Protocol (KMIP) TC document repository.

Document Description:
This document has the small addition to the specification for device
credential as well as a discussion that could go into the usage guide for
use of the device credentials.

View Document Details:
http://www.oasis-open.org/committees/document.php?document_id=42736

Download Document:
http://www.oasis-open.org/committees/download.php/42736/KMIP%20Usage%20Guide%20Proposal%20on%20Device%20Credentials%20v2.doc


PLEASE NOTE:  If the above links do not work for you, your email application
may be breaking the link into two pieces.  You may be able to copy and paste
the entire link address into the address field of your web browser.

-OASIS Open Administration