[SERVER-60362] Implement KMIP-based Audit Log Encryption Created: 30/Sep/21  Updated: 29/Oct/23  Resolved: 03/Nov/21

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 5.2.0

Type: New Feature Priority: Major - P3
Reporter: Gabriel Marks Assignee: Shreyas Kalyan
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
depends on SERVER-60534 Support IVs in audit log encryption h... Closed
is depended on by SERVER-60932 Add integration test for audit key en... Closed
Backwards Compatibility: Fully Compatible
Sprint: Security 2021-10-04, Security 2021-10-18, Security 2021-11-01, Security 2021-11-15
Participants:

 Description   

Add auditEncryptionKeyIdentifier option, which if specified, contains a KMIP key UID which will be used to instantiate an AuditKeyManagerKMIP that will be used during the key generation and encryption stage of audit log encryption. 



 Comments   
Comment by Githook User [ 01/Nov/21 ]

Author:

{'name': 'Gabriel Marks', 'email': 'gabriel.marks@mongodb.com', 'username': 'marksg07'}

Message: SERVER-60362 Implement KMIP-based Audit Log Encryption
Branch: master
https://github.com/mongodb/mongo/commit/102cc8aeb299faadd9349c3ffd23f7ca9ff3c32b

Comment by Githook User [ 01/Nov/21 ]

Author:

{'name': 'Gabriel Marks', 'email': 'gabriel.marks@mongodb.com', 'username': 'marksg07'}

Message: SERVER-60362 Integrate KMIP audit key manager
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/4ef11ec1eeb4aa2636854fb6318547a95818fc2d

Generated at Thu Feb 08 05:49:37 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.