-
Story
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
DFG Security: Test Sprint 9, DFG Security: Test Sprint 10, DFG Security: Sprint 11
-
3
Goal:
To actually implement the adoption steps of a Proteccio HSM as a secure backend for the Barbican (Key Manager) service, migrating from a legacy RHOSP 17.1 environment to RHOSO 18.
Acceptance Criteria:
- Secure network connectivity is established and verified between the OpenStack Key Manager (Barbican) service pods and the Eviden Proteccio HSM.
- The Barbican service is configured with the PKCS#11 driver and successfully uses the Eviden Proteccio HSM as its cryptographic backend for all secret storage operations.
- End-to-end validation tests pass, confirming that secrets can be created, retrieved, and deleted via the Barbican API, with HSM-level logs verifying that all cryptographic functions are being processed by the hardware.
- blocks
-
OSPRH-18982 Document Proteccio HSM Adoption
-
- Refinement
-
- is blocked by
-
OSPRH-18943 Provision Development Environment for Adopting Proteccio HSM
-
- Closed
-
- links to