KMIP Server (PyKMIP)

• Install Phyton3, the Phyton package manager and dependencies:

  sudo apt update
  sudo apt install python3 python3-pip python3-venv libssl-dev libffi-dev python3-dev libsqlite3-dev

• Verify the installation:

  pip3 --version

• Create a virtual environment and activate it:

  python3 -m venv pykmip-env
  source pykmip-env/bin/activate

• To deactivate the virtual environment, enter deactivate within the virtual environment
• To manage packages you can use:

  pip3 install package_name
  pip3 install --upgrade package_name
  pip3 uninstall package_name

• Once inside your virtual environment, upgrade pip and install the pykmip library:

  pip install --upgrade pip
  pip install pykmip

• Verify the installation:

  python3 -c "import kmip; print(kmip.__version__)"

• Create folder /var/log/pykmip with ownership root:user and permissions 770
• Start the server:

  sudo pykmip-server -c ./pykmip-env/server.conf

• The configuration file:

  [server]
  host = 127.0.0.1
  port = 5696
  certificate_path = ./certs/server.crt
  key_path = ./certs/server.key
  ca_path = ./certs/ca.crt
  auth_suite = TLS1.2
  logging_level = INFO
  database_path=/var/lib/pykmip/pykmip.db

check

• sudo chmod -R o+rx /etc/letsencrypt/archive/
  sudo chmod -R o+rx /etc/letsencrypt/live/

• policy_path=/etc/pykmip/policies