Assign Key Management Framework roles

Administrators with the security_admin role can assign Key Management Framework (KMF) admins, who in turn can assign other Key Management Framework roles.

Before you begin

Role required: admin and security_admin

You must elevate to the security_admin role before assigning the KMF admin role. For instructions, see Elevate to a privileged role.

Important:

KMF roles are required to use the Key Management Framework. Users without KMF roles aren’t be able to access lists, tables, and modules used to configure key management.

Procedure

1. Elevate to the security admin role.
2. Navigate to User Administration > Users and select the user you want to be the KMF admin.
3. If the user doesn’t already have the admin and security_admin roles, select Edit under the Roles related list and add admin and security _admin.
4. Navigate to System Security > Key Management Administration.
5. Select the user that you want to be KMF admin in the Available Users column and move them to the Selected User(s) column.

   

6. Select Save.
7. Navigate to User Administration > Users and select the user you just gave the KMF admin role to.
   That user now has the sn_kmf.admin role in the Roles related list. That user can now assign other KMF roles.

   

What to do next

If you have the KMF admin role, follow these steps for assigning other KMF roles:

1. Navigate to User Administration > Users and select the user you want to have another KMF role, such as KMF Cryptographic Manager.
2. In the Roles related list, click Edit and select the KMF roles you want to assign the users. All KMF roles start with sn_kmf.

   

What to do next

To learn more about the available KMF roles, see Roles installed with Key Management Framework.