OASIS Members,
OASIS is pleased to announce the approval and publication of new Committee Specifications and Committee Notes by the members of the OASIS Key Management Interoperability Protocol (KMIP) TC:
Key Management Interoperability Protocol Specification Version 1.2
Committee Specification 01
11 November 2014
Key Management Interoperability Protocol Profiles Version 1.2
Committee Specification 01
11 November 2014
KMIP Additional Message Encodings Version 1.0
Committee Specification 01
11 November 2014
KMIP Storage Array with Self-Encrypting Drives Profile Version 1.0
Committee Specification 01
11 November 2014
KMIP Symmetric Key Lifecycle Profile Version 1.0
Committee Specification 01
11 November 2014
KMIP Asymmetric Key Lifecycle Profile Version 1.0
Committee Specification 01
11 November 2014
KMIP Cryptographic Services Profile Version 1.0
Committee Specification 01
11 November 2014
KMIP Symmetric Key Foundry for FIPS 140-2 Profile Version 1.0
Committee Specification 01
11 November 2014
KMIP Tape Library Profile Version 1.0
Committee Specification 01
11 November 2014
KMIP Suite B Profile Version 1.0
Committee Specification 01
11 November 2014
KMIP Opaque Managed Object Store Profile Version 1.0
Committee Specification 01
11 November 2014
Key Management Interoperability Protocol Usage Guide Version 1.2
Committee Note 01
11 November 2014
Key Management Interoperability Protocol Test Cases Version 1.2
Committee Note 01
11 November 2014
Overview:
These documents are intended for developers and architects who wish to design systems and applications that interoperate using the Key Management Interoperability Protocol Specification.
KMIP v1.2 enhances the KMIP v1.1 standard (established in February 2013) by:
1) defining new functionality in the protocol to improve interoperability;
2) defining additional Test Cases for verifying and validating the new functionality;
3) providing additional information in the KMIP Usage Guide to assist in effective implementation of KMIP in key management clients and servers; and
4) defining new profiles for establishing KMIP-compliant implementations.
The Key Management Interoperability Protocol (KMIP) is a single, comprehensive protocol for communication between clients that request any of a wide range of encryption keys and servers that store and manage those keys. By replacing redundant, incompatible key management protocols, KMIP provides better data security while at the same time reducing expenditures on multiple products.
These documents are intended for developers and architects who wish to design systems and applications that interoperate using the Key Management Interoperability Protocol Specification.
- Key Management Interoperability Protocol Specification Version 1.2 provides the core specification.
- Key Management Interoperability Protocol Profiles Version 1.2 define a set of normative constraints for employing KMIP within a particular environment or context of use. They may, optionally, require the use of specific KMIP functionality or in other respects define the processing rules to be followed by profile actors.
- KMIP Additional Message Encodings Version 1.0 describes additional (optional) message encodings as an alternative to the (mandatory) raw TTLV encoding including: HTTP, JSON, and XML.
- KMIP Storage Array with Self-Encrypting Drives Profile Version 1.0 describes a profile for Storage Arrays with Self-Encrypting Drives as KMIP clients interacting with KMIP servers.
- KMIP Symmetric Key Lifecycle Profile Version 1.0 describes a profile for a KMIP server performing symmetric key lifecycle operations based on requests received from a KMIP client.
- KMIP Tape Library Profile Version 1.0 describes a profile for Tape Libraries as KMIP clients interacting with KMIP servers.
- KMIP Cryptographic Services Profile Version 1.0 describes the use of KMIP operations to support cryptographic services being performed by a KMIP server on behalf of a KMIP client for key management operations.
- KMIP Asymmetric Key Lifecycle Profile Version 1.0 describes a profile for a KMIP server performing asymmetric key lifecycle operations based on requests received from a KMIP client.
- KMIP Symmetric Key Foundry for FIPS 140-2 Profile Version 1.0 describes a profile for a KMIP server creating FIPS140-2 approved symmetric key algorithms based on requests received from a KMIP client.
- KMIP Opaque Managed Object Store Profile Version 1.0 describes a profile for a KMIP server performing opaque managed object storage operations based on requests received from a KMIP client.
- KMIP Suite B Profile Version 1.0 describes a profile for KMIP clients and KMIP servers using Suite B cryptography that has been approved by NIST for use by the U.S. Government and specified in NIST standards or recommendations.
- Key Management Interoperability Protocol Usage Guide Version 1.2 is intended to complement the Key Management Interoperability Protocol Specification by providing guidance on how to implement KMIP most effectively to ensure interoperability and to address key management usage scenarios.
- Key Management Interoperability Protocol Test Cases Version 1.2 is intended for developers and architects who wish to design systems and applications that interoperate using the Key Management Interoperability Protocol specification.
URIs:
The prose specifications and related files are available here:
- Key Management Interoperability Protocol Specification Version 1.2
Editable source (Authoritative):
HTML:
PDF:
- Key Management Interoperability Protocol Profiles Version 1.2
Editable source (Authoritative):
HTML:
PDF:
- KMIP Additional Message Encodings Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- KMIP Storage Array with Self-Encrypting Drives Profile Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- KMIP Symmetric Key Lifecycle Profile Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- KMIP Asymmetric Key Lifecycle Profile Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- KMIP Cryptographic Services Profile Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- KMIP Symmetric Key Foundry for FIPS 140-2 Profile Version 1.0
Editable Source (Authoritative):
HTML:
PDF:
- KMIP Tape Library Profile Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- KMIP Suite B Profile Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- KMIP Opaque Managed Object Store Profile Version 1.0
Editable source (Authoritative):
HTML:
PDF:
- Key Management Interoperability Protocol Usage Guide Version 1.2
Editable source (Authoritative):
HTML:
PDF:
- Key Management Interoperability Protocol Test Cases Version 1.2
Editable source (Authoritative):
HTML:
PDF:
Distribution ZIP file
For your convenience, OASIS provides complete packages of the prose specifications and related files in ZIP distribution files. You can download the ZIP files here:
- Key Management Interoperability Protocol Specification Version 1.2:
- Key Management Interoperability Protocol Profiles Version 1.2:
- KMIP Additional Message Encodings Version 1.0:
- KMIP Storage Array with Self-Encrypting Drives Profile Version 1.0:
- KMIP Symmetric Key Lifecycle Profile Version 1.0:
- KMIP Asymmetric Key Lifecycle Profile Version 1.0:
- KMIP Cryptographic Services Profile Version 1.0:
- KMIP Symmetric Key Foundry for FIPS 140-2 Profile Version 1.0:
- KMIP Tape Library Profile Version 1.0:
- KMIP Suite B Profile Version 1.0:
- KMIP Opaque Managed Object Store Profile Version 1.0:
- Key Management Interoperability Protocol Usage Guide Version 1.2:
- Key Management Interoperability Protocol Test Cases Version 1.2:
Members of the OASIS Key Management Interoperability Protocol (KMIP) TC [1] approved these specifications and notes by Special Majority Votes. The documents had been released for public review as required by the TC Process [2]. The votes to approve as Committee Specifications and Notes passed [3], and the documents are now available online in the OASIS Library as referenced above.
Our congratulations to the TC on achieving this milestone and our thanks to the reviewers who provided feedback on the specification drafts to help improve the quality of the work.
========== Additional references:
[1] OASIS Key Management Interoperability Protocol (KMIP) TC
[2] Public reviews:
- 30-day public review, 19 February 2014:
- Comment resolution log (master log copied to each csprd directory):
- 30-day public review, Key Management Interoperability Protocol Profiles Version 1.2, 07 April 2014:
- Comment resolution log:
[3] Approval ballots:
--
/chet
[§] ----------------
Chet Ensign
Director of Standards Development and TC Administration
OASIS: Advancing open standards for the information society
http://www.oasis-open.orgPrimary: +1 973-996-2298
Mobile: +1 201-341-1393