<span style=" font-size:10pt;font-family:sans-serif">Hi</span><br><br><span style=" font-size:10pt;font-family:sans-serif">Also in case that

u configure 3 SKLM servers (1 Primary - 2 Slaves, in case the Primary is

not responding you will see in the logs this messages:</span><br><br><img src=cid:_1_0EA9F2B40EA9EA6C0025319BC2258514 style="border:0px solid;"><br><br><span style=" font-size:10pt;font-family:sans-serif"><br></span><br><br><span style=" font-size:9pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">Regards</span><br><span style=" font-size:9pt;font-family:Arial"> </span><br><table width=780 style="border-collapse:collapse;"><tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><div align=center><hr noshade></div><br><span style=" font-size:1pt;font-family:Arial"> </span><tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:1pt;font-family:Arial"> </span><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:blue;font-family:Arial"><b>Yaron

Daniel</b></span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> 94

Em Ha'Moshavot Rd</span><td width=96 rowspan=3 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><div align=right><img align=bottom src=cid:_1_0EA649080EA643540025319BC2258514 style="border:0px solid;"></div><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:blue;font-family:Arial"><b>Storage

Architect – IL Lab Services (Storage)</b></span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> Petach

Tiqva, 49527</span><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:blue;font-family:Arial"><b>IBM

Global Markets, Systems HW Sales</b></span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> Israel</span><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:blue;font-family:Arial"><b> </b></span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> </span><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:9pt;font-family:Arial"> </span><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">Phone:</span><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">+972-3-916-5672</span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> </span><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt"> </span><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">Fax:</span><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">+972-3-916-5672</span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> 

</span><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt"> </span><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">Mobile:</span><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">+972-52-8395593</span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> 

</span><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt"> </span><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">e-mail:</span><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial">yard@il.ibm.com</span><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt;color:#5f5f5f;font-family:Arial"> 

</span><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt"> </span><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><a href="Webex:%20%20%20%20%20%20%20%20%20%20%20%20%20https://ibm.webex.com/meet/yard%0dIBM%20Israel"><span style=" font-size:12pt;color:#5f5f5f;font-family:Times New Roman">Webex:           

https://ibm.webex.com/meet/yard</span></a><span style=" font-size:10pt;color:blue;font-family:Arial"><u><br></u></span><a href="Webex:%20%20%20%20%20%20%20%20%20%20%20%20%20https://ibm.webex.com/meet/yard%0dIBM%20Israel"><span style=" font-size:10pt;color:blue;font-family:Arial"><u>IBM

Israel</a><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:10pt"> <tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:9pt;color:#5f5f5f;font-family:Arial"> <tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:9pt;color:#5f5f5f;font-family:Arial"> </table><p style="margin-top:0px;margin-Bottom:0px"> <span style=" font-size:12pt">  <img src=cid:_2_0EA936B00EA932A00025319BC2258514 style="border:0px solid;"><img src=cid:_2_0EA938B80EA932A00025319BC2258514 style="border:0px solid;"><img src=cid:_2_0EA93AC00EA932A00025319BC2258514 style="border:0px solid;"><img src=cid:_2_0EA93CC80EA932A00025319BC2258514 style="border:0px solid;"><img src=cid:_2_0EA93ED00EA932A00025319BC2258514 style="border:0px solid;"><img src=cid:_2_0EA940D80EA932A00025319BC2258514 style="border:0px solid;"><img src=cid:_2_0EA942E00EA932A00025319BC2258514 style="border:0px solid;"><img src=cid:_2_0EA9C2B80EA932A00025319BC2258514 style="border:0px solid;"> <span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">From:

       </span><span style=" font-size:9pt;font-family:sans-serif">"Felipe

Knop" <knop@us.ibm.com> <span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">To:

       </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug-discuss@spectrumscale.org</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Cc:

       </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug-discuss@spectrumscale.org</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Date:

       </span><span style=" font-size:9pt;font-family:sans-serif">20/02/2020

00:08</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Subject:

       </span><span style=" font-size:9pt;font-family:sans-serif">[EXTERNAL]

Re: [gpfsug-discuss] Encryption - checking key server health (SKLM)</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Sent

by:        </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug-discuss-bounces@spectrumscale.org</span><br><hr noshade><br><br><br><span style=" font-size:10pt;font-family:Arial">Bob,</span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">Scale does not yet

have a tool to perform a health-check on a key server, or an independent

mechanism to retrieve keys.</span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">One can use a command

such as 'mmkeyserv key show' to retrieve the list of keys from a given

SKLM server (and use that to determine whether the key server is responsive),

but being able to retrieve a list of keys does not necessarily mean being

able to retrieve the actual keys, as the latter goes through the KMIP port/protocol,

and the former uses the REST port/API:</span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><tt><span style=" font-size:12pt"># mmkeyserv key show --server 192.168.105.146

--server-pwd /tmp/configKeyServ_pid11403914_keyServPass --tenant sklm3Tenant<br>KEY-ad4f3a9-01397ebf-601b-41fb-89bf-6c4ac333290b<br>KEY-ad4f3a9-019465da-edc8-49d4-b183-80ae89635cbc<br>KEY-ad4f3a9-0509893d-cf2a-40d3-8f79-67a444ff14d5<br>KEY-ad4f3a9-08d514af-ebb2-4d72-aa5c-8df46fe4c282<br>KEY-ad4f3a9-0d3487cb-a674-44ab-a7d0-1f68e86e2fc9</span></tt><br><tt><span style=" font-size:12pt">[...]</span></tt><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">Having a tool that

can retrieve keys independently from mmfsd would be useful capability to

have. Could you submit an RFE to request such function?</span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">Thanks,</span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">  Felipe</span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">----<br>Felipe Knop knop@us.ibm.com<br>GPFS Development and Security<br>IBM Systems<br>IBM Building 008<br>2455 South Rd, Poughkeepsie, NY 12601<br>(845) 433-9314 T/L 293-9314<br> </span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial"> </span><br><span style=" font-size:10pt;font-family:Arial">----- Original message

-----<br>From: "Oesterlin, Robert" <Robert.Oesterlin@nuance.com><br>Sent by: gpfsug-discuss-bounces@spectrumscale.org<br>To: gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>Cc:<br>Subject: [EXTERNAL] [gpfsug-discuss] Encryption - checking key server health

(SKLM)<br>Date: Wed, Feb 19, 2020 11:35 AM<br> </span><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt;font-family:Arial">I’m

looking for a way to check the status/health of the encryption key servers

from the client side - detecting if the key server is unavailable or can’t

serve a key. I ran into a situation recently where the server was answering

HTTP requests on the port but wasn’t returning they key. I can’t seem

to find a way to check if the server will actually return a key.</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt;font-family:Arial"> </span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt;font-family:Arial">Any

ideas?</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt;font-family:Arial"> </span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt;font-family:Arial"> </span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:10pt;font-family:Arial">Bob

Oesterlin</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:10pt;font-family:Arial">Sr

Principal Storage Engineer, Nuance</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:10pt;font-family:Arial"> </span></p><br><tt><span style=" font-size:10pt">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</span></tt><tt><span style=" font-size:10pt;color:blue"><u><br></u></span></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank"><tt><span style=" font-size:10pt;color:blue"><u>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</u></span></tt></a><tt><span style=" font-size:10pt"></span></tt><br><span style=" font-size:10pt;font-family:Arial"> </span><br><br><tt><span style=" font-size:10pt">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></span></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><span style=" font-size:10pt">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</span></tt></a><tt><span style=" font-size:10pt"><br></span></tt><br><br><BR>