Skip to content

Commit 56a66f9

Browse files
committed
updated thales with more information and feedback
1 parent 051ee36 commit 56a66f9

File tree

1 file changed

+7
-9
lines changed
  • contrib/pg_tde/documentation/docs/global-key-provider-configuration

1 file changed

+7
-9
lines changed
Lines changed: 7 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,20 @@
11
# Thales KMIP Server Configuration
22

3-
To use the Python library pykmip for cryptographic operations with Thales CipherTrust Manager, see Using pykmip in the Implementing Thales CipherTrust Manager documentation for instructions. pykmip is a Python library that implements the KMIP industry standard for key management operations.
4-
5-
https://www.enterprisedb.com/docs/partner_docs/ThalesCipherTrustManager/
6-
https://www.enterprisedb.com/docs/partner_docs/ThalesCipherTrustManager/05-UsingThalesCipherTrustManager/
3+
`pg_tde` is compatible with the Thales CipherTrust Manager via the KMIP protocol. For a full setup guide, see [the following documentation](https://thalesdocs.com/ctp/cm/2.19/reference/kmip-ref/index.html?).
74

85
## Recommended Configuration Steps
96

10-
1.
11-
2.
12-
3.
7+
1. Obtain and secure the certificates from Thales CipherTrust Manager.
8+
2. Create `pykmip.conf`.
9+
3. Configure PostgreSQL for pg_tde + KMIP.
10+
4. Create or Retrieve the KMIP Key.
1311

1412
## Example Configuration SQL
1513

1614
```sql
1715
SELECT pg_tde_add_global_key_provider_kmip(
1816
'thales_kmip_provider',
19-
'kmip.thales.local',
17+
'kmip.example.org',
2018
5696,
2119
'/path/to/thales-client-cert.pem',
2220
'/path/to/thales-client-key.pem',
@@ -25,4 +23,4 @@ SELECT pg_tde_add_global_key_provider_kmip(
2523
```
2624

2725
!!! note
28-
Replace the above paths with the actual certificate locations on your PostgreSQL host.
26+
Replace the example paths and parameters with the actual certificate locations on your PostgreSQL host.

0 commit comments

Comments
 (0)