This document provides detailed instructions for integrating Fortanix Data Security Manager (DSM) with Bloombase StoreSafe for secure storage encryption. It covers configuration steps for both Fortanix DSM and Bloombase StoreSafe, including certificate management and key generation processes. Successful integration allows users to utilize Fortanix DSM as a key management system for encryption needs within Bloombase StoreSafe.

1. Fortanix Technical Documentation

2. © 2016 – 2024 Fortanix, Inc. All Rights Reserved.
Fortanix® and the Fortanix logo are registered trademarks or trade names of
Fortanix, Inc.
All other trademarks are the property of their respective owners.
NOTICE: This document was produced by Fortanix, Inc. (Fortanix) and contains
information which is proprietary and confidential to Fortanix. The document contains
information that may be protected by patents, copyrights, and/or other IP laws. If you
are not the intended recipient of this
Confidential
Page: 2 of 17

3. Table of Contents
Fortanix Data Security Manager (DSM) > Use-cases and Integrations > Storage Encryption
Using Fortanix Data Security Manager with Bloombase Storesafe
1.0 Introduction
2.0 Configuring Fortanix DSM for Integration with Bloombase Storesafe
3.0 Configuring Bloombase Storesafe for Integration with Fortanix DSM
4.0 Uploading a Certificate and Generating a Key in Fortanix DSM
5.0 Configuring Fortanix DSM KMIP Entity in Bloombase Storesafe
4
4
4
5
10
14
Confidential
Page: 3 of 17

4. 1.0 Introduction
This article describes how to integrate Bloombase Storesafe with Fortanix-Data-
Security-Manager (DSM).
2.0 Con guring Fortanix DSM for Integration with
Bloombase Storesafe
1. In Fortanix DSM, create an app with the interface set to Key Management
Interoperability Protocol (KMIP) and the authentication method set to API
Key. After the app is created, copy the App ID (UUID). The App ID is
needed as the Common Name (CN) for the Bloombase Client KMIP
Certificate. After the Bloombase Client Certificate is created, you should
change the authentication method to certificate as described in Section
4.0.
Figure 1: Creating a New App
2. Copy the UUID.
Figure 2: Copying the UUID
Using Fortanix Data Security Manager with
Bloombase Storesafe
Confidential
Page: 4 of 17

5. 3.0 Con guring Bloombase Storesafe for Integration
with Fortanix DSM
1. On the Bloombase Storesafe Console, select OASIS KMIP Key
Manager from the Bloombase Storesafe main menu.
Figure 3: OASIS KMIP Key Manager
2. Click Add.
3. On the Modify KMIP Key Manager page:
a. Fill in the name that you want to use to identify with this instance
of Fortanix DSM as the KMIP Server.
b. For the Model field, select Generic.
c. Specify the Hostname/IP Address of the Fortanix DSM cluster.
Confidential
Page: 5 of 17

6. d. Leave the Port as default 5696.
e. Leave the Timeout and Retry Count info as default unless you
have a specific setting you want to use.
f. Leave the Username and Password as blank.
g. Click Submit to save the information.
Figure 4: Modifying the KMIP Key Manager
4. Select Create for the client keystore, to create a Rivest, Shamir, Adleman
(RSA) Keypair, and a Certificate Signing Request (CSR).
Figure 5: Creating an RSA Keypair and a CSR Request
5. Specify the algorithm/key sizes you want for your keypair, the values for
the certificate Distinguished Name (DN), and then click Generate to
generate the certificate request.
Confidential
Page: 6 of 17

7. Figure 6: Generating a Certificate Request
6. Click Certificate Request to download the CSR and send it to your CA
for certificate issuance.
NOTE
You must specify the app UUID copied previously in Section 2.0
as the CN of the certificate request.
Confidential
Page: 7 of 17

8. Figure 7: Sending a Certificate Request
7. Upload the CA Public Certificate used to sign the CSR to the Trust
Certificate Store.
Figure 8: Uploading the Trust Certificate
8. Upload the signed certificate to the Client Keystore.
Confidential
Page: 8 of 17

9. Figure 9: Uploading the Signed Certificate
9. Upload the Fortanix DSM cluster certificate to the Trust Certificate Store.
Figure 10: Uploading the Fortanix DSM Cluster
Certificate
10. Click Submit to save the configuration.
Figure 11: Submitting the Certificates
Confidential
Page: 9 of 17

10. 4.0 Uploading a Certi cate and Generating a Key in
Fortanix DSM
1. Go to the detailed view of the app that you created in Section 2.0 and
click Change authentication method.
Figure 12: Changing the Authentication Method
2. Select Certificate as the authentication method, and then click SAVE.
Confidential
Page: 10 of 17

11. Figure 13: Selecting Certificate as the Authentication
Method
3. Upload the Bloombase KMIP Client Certificate you created in Section 3.0
and then click UPDATE.
Confidential
Page: 11 of 17

12. Figure 14: Uploading the Bloombase KMIP Client
Certificate
4. Click the Security Objects tab, and click to create the symmetric key
that will be used by Bloombase Storesafe.
Figure 15: Adding a Security Object
5. Specify a name for the symmetric key, select the group you created
previously in Section 2.0, and then select GENERATE for the create key
workflow.
Confidential
Page: 12 of 17

13. Figure 16: Generating a New Key
6. Select the key type, key size, and the key operations permitted. The
recommended algorithm is AES and the recommended key size is 256
bit.
Figure 17: Selecting Key Type and Size
7. Click GENERATE to generate the key. The key is generated as shown
in the figure below.
Confidential
Page: 13 of 17

14. Figure 18: Key is Successfully Generated
5.0 Con guring Fortanix DSM KMIP Entity in
Bloombase Storesafe
1. In the Bloombase Console for the KMIP Key Manager, open the Fortanix
DSM KMIP entity.
Figure 19: Fortanix DSM KMIP Entity
2. Click Test.
Figure 20: Testing the Connection
3. The successful test confirms that Bloombase Storesafe can authenticate
and connect to Fortanix DSM.
Figure 21: Connection is Successful
4. To select the key created in Fortanix DSM in Bloombase Storesafe Key
Wrapper, click Create Key Wrapper.
Confidential
Page: 14 of 17

15. Figure 22: Creating a Key Wrapper
5. Under Modify Key Wrapper, select the Fortanix DSM entity that you
configured in Bloombase Storesafe in Section 3.0 and select the key
created under the Object drop down menu and click Select Key.
Confidential
Page: 15 of 17

16. Figure 23: Selecting the Key
6. Click Submit to submit the updated configuration.
Figure 24: Submitting the Updated Configuration
7. Confirm the key has been properly selected by clicking Find Key
Wrapper, and then click Find.
Confidential
Page: 16 of 17

17. Figure 25: Finding the Key
You can now use the Fortanix DSM KMIP server as a Key Management System
(KMS) for all storage encryption implemented with Bloombase Storesafe. Please
refer to the Bloombase Storesafe documentation for implementing the specific
storage encryption use case you have.
Powered by Document360
Confidential
Page: 17 of 17