SNIA/SSIF KMIP Interoperability Proposal

What is the proposal?

• Host a KMIP interoperability program which includes:

– Publishing a set of interoperability tests– Maintaining a site with KMIP server

implementation (s) to test against– Maintaining a web site with a list of members

and results from the KMIP interoperability testing– Making a portion of the web site available to

each member to publish more documentation on their KMIP implementation with pointers back to their own web sites

What does it mean to be included?

Documented results of at a minimum a vendor’s KMIP client interaction with a KMIP server implementation

Document test resultsDocument how to configure diagnostics to trouble shoot a configurationDocument release levels tested

Focus is on providing material for vendor support organizations

What we are not focusing on:

Formal certification Validation of KMIP implementation internal operationsClaims of security or function outside of the KMIP specification

Levels of Interoperability Testing

New specification items - pre-finalization of the specification proposals / updates

We are suggesting that this is handled through the KMIP interop process we have been using currently

With agreed to KMIP specifications and profilesWe are suggesting hosting server implementations and clients in a neutral hosting facility

Interoperability lab testing has multiple phases:Private testing – used during development or validation - confidentialPublic testing – once interoperability and meeting conformance is achieved then a documented public test to demonstrate

Formal compliance testing – branding and versioning

New protocol elements and versions

Current team for interop has successfully gotten to a agreed to specification

Rough consensus and working codeValidate that new proposals do not have implementation challenges

Challenges with this approach for other purposes:Bilateral configurations for testingEach company has to host servers outside the corporate networkNot public – can not point customers to a site that shows interoperability resultsAs companies ship products they want demonstrated interoperability against know versions of products

Private testing in a hosted interoperability lab

Clients or servers schedule testingEstimate of a month for a clientHosting environment needs to :

set up ids for firewall traversalIds to get read only access to server logsScheduling of testing windows

Opportunity for clients to validate their implementations in private

Clients get access to server logs and diagnostic and error reporting for trouble shootingTesting is private and confidential

Public testing in a hosted interoperability lab

Hosted environment for:KMIP serversKMIP client test harness

Clients declare readiness to run public testModerated test

Captures logsReviews conformance to stated specification and profile

Success is declared

Public web site

Lists products that have completed interoperability testing

Product identification with versionsKMIP specification level and profile(s) supportedDescription of the usage modelConfiguration exampleLogs documenting the resultsDiagnostics and documentation links to the vendor site

How to fund the interoperability lab

Web siteDescribes testsDescribes program and how to joinPublishes implementations that have passed interoperability testing

Server implementationsCost for hosting of physical or virtual server

Client implementationsCost for 2 months per year of testingWeb site for documenting results

Contractor resourcesManage hosted resourcesSchedule testing

Committee Defines test casesReviews and approves test results

SSIFSSIF

TutorialsWhite PapersArticlesSolutions Guides Best Current Practices

Creating, Publishing and Presenting

Storage Security Industry Forum

Join the SSIF and help lead the way to a better understanding of storage security.

What are the costs?• SNIA/SSIF membership

– $5000 for > $50 million company– $1000 for < $50 million company– Non-storage centric restriction

• SNIA/SSIF will maintain– Interop test site– Web site for interop results– Meet regularly to review interop results– Meet infrequently to update interop tests– Provide marketing presence for member companies

to point to 3rd party KMIP validation