How do I create DKDM for other servers

Anything and everything to do with DCP-o-matic.
bnm14777
Posts: 40
Joined: Fri Jun 08, 2018 8:12 am

How do I create DKDM for other servers

Post by bnm14777 »

How do I create DKDM for other servers

If I ask another server to issue KDM for me

Thank you very much
Carsten
Posts: 2804
Joined: Tue Apr 15, 2014 9:11 pm
Location: Germany

Re: How do I create DKDM for other servers

Post by Carsten »

You need to send them your decryption certificate (->Preferences->Keys).

Then they are able to send (D)KDMs to you, targeted at your installation.

Once you did that, youl should backup your config/keys and store them in a safe place. If you do a fresh install of DCP-o-matic, switch computers, etc., the DKDMs do not work anymore, unless you restore your original config/key set.


- Carsten
bnm14777
Posts: 40
Joined: Fri Jun 08, 2018 8:12 am

Re: How do I create DKDM for other servers

Post by bnm14777 »

I now have a master DCP created by DOM, and I want to have other platform (not necessarily DOM) software or hardware to distribute KDM. How should I do this? Thank you, Carsten
Carsten
Posts: 2804
Joined: Tue Apr 15, 2014 9:11 pm
Location: Germany

Re: How do I create DKDM for other servers

Post by Carsten »

Every external source for KDMs needs to receive a DKDM targeted towards this DCP. In order to issue such a DKDM for them, they need to send you THEIR decryption certificate. Every system able to distribute (D)KDMs must have an export option for it's certificate, or certificate chain.
You import this cert as a unique screen, then you can issue a DKDM for them. From this DKDM, they can issue further KDMs.

- Carsten