[kmip] Question on Secret Data retrieval while the object is not in Active state

["Ying, Catherine" <Catherine.Ying@safenet-inc.com>]

Hi,

 

We have a customer that uses KMIP to communicate with our SafeNet KeySecure server. Recently they raised the request to block the Secret Data object from being retrieved from the server unless the object is in Active state. We have explained to them that it is a violation of the KMIP spec 1.1 in section 4.11. Currently Get command returns the Managed Object specified by the Unique Identifier, regardless of its state. Secret Data is one of the Managed Object types. However, they strongly request that KeySecure server implements the Get behavior as they desired. We have to raise this to the KMIP committee.

 

My question is, have any similar requests been raised by other KMIP customers before? If they have, what’s the guideline on handling such out-of-band customer request? If not, I would like to hear your opinions on this request.

 

Thanks a lot!

Catherine

The information contained in this electronic mail transmission 
may be privileged and confidential, and therefore, protected 
from disclosure. If you have received this communication in 
error, please notify us immediately by replying to this 
message and deleting it from your computer without copying 
or disclosing it.