This chapter describes the OKM Manager and explains procedures for:
Installing the OKM Manager software (see "Installing the OKM Manager Software")
Invoking the OKM Manager (see "Invoking the OKM Manager")
Uninstalling the OKM Manager software (see "Uninstalling the OKM Manager Software").
The chapter also provides a brief description of the menus and panes.
The OKM Manager is an application that serves as a client to the KMA. It can be used to configure, control, and monitor the KMA. Depending on the assigned user roles, users can perform different operations.
To download the installer for the OKM Manager software:
Log in to the My Oracle Support (MOS) website at the following location:
Open the Patches & Updates tab (near the top of the window).
In the Patch Search pane, with the Search tab open, click Product or Family(Advanced).
Select the box for Include all products in a family.
In the Product field, type OKM or key and select Oracle Key Manager (OKM) from the pull-down list.
In the Release field drop-down, select Oracle Key Manager (OKM) 3.0.
Close the Release drop-down window and click the Search button.
Important – Uninstall any previous OKM Manager version before installing the new OKM Manager. Install and use the OKM 3.0 Oracle Key Manager GUI before connecting to an OKM 3.0 KMA. Do not use an OKM 2.5.x GUI to connect to an OKM 3.0 KMA.
Depending on whether you are running a Windows or Solaris system, select the applicable process to invoke the installer program.
For Windows, double-click the shortcut to start the installer program.
For Solaris,
Set your DISPLAY environment to identify the system to which this installer should be displayed.
If you start the installer program on the local Solaris system, set your DISPLAY environment variable to ”:0.0.”
Navigate to the directory where you downloaded the installer.
Invoke the installer.
For example, if you downloaded the installer to the /tmp directory, and you plan to invoke it on your local Solaris system, you start the installer by entering the following commands at a shell prompt:
DISPLAY=:0.0 export DISPLAY cd /tmp ls install.bin sh ./install.bin
Note: If you invoke the installer on one Solaris system and want it to be displayed on another Solaris system, set your DISPLAY environment variable to identify the system on which it should be displayed.On the display system, first run the xhost(1) utility to allow access from the system from which you invoke the installer. For example, on the system (named ”hosta”) where you wish to display the installer, enter: |
xhost +
On the system where you start the installer, enter:
ping hostaDISPLAY=hosta:0.0
export DISPLAY
cd /tmp
ls install.bin
sh ./install.bin
The Introduction window is displayed. The following screen examples are for a Windows system.
Select Next.
The Elevated Privileges window is displayed, telling you that you need elevated privileges to complete the installation. This screen does not appear on the Solaris installer.
The Choose Install Folder window is displayed.
To select the default folder, select Next, or supply your own installation folder, and select Next.
The Choose Shortcut Folder window is displayed, allowing you to create the product icons where you desire.
Select Next after you make your choice.
The Pre-Installation summary screen is displayed.
Select Install to install the OKM Manager, or select Previous to revise your setup.
The installation process is now complete. Select Done to exit.
Two methods can be used to invoke the OKM Manager, depending on your environment:
Startup with Windows
Startup with Solaris.
If you instructed the installation program to create a shortcut, double-click it to launch the OKM Manager application.
Otherwise, launch Windows Explorer, navigate to where you installed the OKM Manager, and invoke OKM_Manager.exe.
As with Windows, you can direct the installation program to create a shortcut. For example, if you create the shortcut in your home directory, you can invoke it at a shell prompt by entering:
~/OKM_Manager
Alternatively, you can navigate to where you installed the OKM Manager and invoke it by entering:
./OKM_Manager
The OKM Manager GUI is shown below with a sample menu.
The OKM Manager GUI contains a System menu, View menu, and Help menu. Click the appropriate action bar item to display a menu and then select a menu item.
Toolbar buttons provide shortcuts to several menu options.
Connect: Displays the Connect to Cluster dialog box that allows you to connect to a pre-existing Cluster using a Profile or to create a new Cluster profile.
Disconnect: Displays the Disconnect from KMA dialog box that disconnects you from the KMA.
Change Passphrase: Displays the Change passphrase dialog box that lets you modify the passphrase.
Save Certificates: Displays the Save Certificates dialog box that permits you to edit the CA Certificate and Client Certificate file names.
Options: Displays the Options dialog box that is used to specify various configuration settings.
Exit: Closes the OKM Manager GUI.
Refresh: Refreshes the screen.
Save Report: Save Report allows you to download the contents of any List screen. to a text file on the system where the OKM Manager is running.
Select All: Select All selects all items on a List screen.
Sort By: Sorts a list of items on a List screen. This is equivalent to clicking on column headings in a list.
The table below describes the Toolbar buttons on the OKM.
Button | Description |
---|---|
Connect | Displays the Connect to KMA dialog box that allows you to connect to a KMA by selecting a profile. |
Disconnect | Displays the Disconnect from KMA dialog box that allows you to disconnect from the KMA. |
Help | Displays the online help index and table of contents for OKM. |
Shortcut keys allows you to choose commands in a single step. The following shortcut keys are used:
Description | Shortcut Keys |
---|---|
Cuts the current selection | Ctrl+X |
Copies the current selection | Ctrl+C |
Copies the contents from the Clipboard to the current selection point | Ctrl+V |
Brings up a dialog box to save a report to a local site | Ctrl+S |
The OKM Manager GUI includes three panes:
OKM Management Operations Tree
OKM Management Operation Details
Session Audit Log.
The OKM Management Operations Tree pane, located on the left-side of the screen, displays all operational functions of the OKM. Depending on your assigned role(s), the options on this tree pane differ. The example below shows the operations that a Security Officer can perform.
When an operation is selected, the OKM Manager Operation Details pane, to the right of the Operations Tree Pane, displays the required components for the selected operations. You can apply filters on the items that are displayed in list panels. The example below shows the User List, when the User List menu option was selected from the System Management menu in the Operations Tree pane.
The Session Audit Log pane, below the Operations Tree Pane and the Operations Details Pane, provides a scrollable list of the most recent session events.
The Status Bar, at the bottom of the screen, is comprised of the following fields:
User Name: Displays the user name of the currently logged-in user. In the screen below, the Security Officer (SO) is logged in.
Connection Status: Displays the state of the current connection, that is, Connected
KMA IP Address: Displays the Management Network IP address and Name of the target KMA.
If there is no connection to the KMA, the Status fields are blank.
The are common panel components in the OKM Manager screens. These are described below:
Title
Displays the title of the screen.
Filter
Allow you to filter the database by specific keys. It contains the following components:
Table label: Specifies the table to which the filtering applies
Filter Attribute combo box: Indicates the fields to filter
Filter Operator 1 combo box: Provides the filter operators that are applied to Filter Value 1. The filter operations are:
Equals =
Not equal <>
Greater than >
Less than <
Greater than or equals >=
Less than or equals <=
Starts with ~
Empty
Not Empty
Filter Value 1 control: Used as a single value or the starting value of the filter key range
Filter Value 2 control: Used as a single value or the ending value of the filter key range
Use button: Applies the filter to the displayed list.
Refresh:
Click this button to refresh the displayed list. This does not apply filters selected since the last Use or Reset, and does not change the page of the list.
Reset:
Click this button to remove all filters and reset the displayed list to the first page.
Click this button to go to the first page of the list.
Click this button to go to the previous page.
Click this button to go to the next page.
Results in Page:
Displays the number of items that can be displayed on the current page. Appends ”(last page)” if you are at the end of the list. The maximum number of items displayed on a page is defined by the Query Page Size value on the Options dialog.
Note: If the number of records output is greater than the Query Page Size, multiple pages are displayed. Click the buttons below the filters to move between pages. |
Sorting:
Click a column heading to sort the list by that field. If the output requires multiple pages, the complete set of results is sorted, then the corresponding page is returned.
Message
Displays messages that are related to database queries. It works in conjunction with the Database View list. It contains the following components:
Static text label: Displays error messages, such as:
Result limit exceeded. 10,000 results returned. Use a filter to reduce the filter size.
Two options are available to begin to uninstall the OKM software:
Navigate to the directory where the uninstall program resides and launch the executable file from there
For Windows users only, launch the Add or Remove Programs process
In both cases, the Preparing Setup window is displayed after you finish these procedures. See "Completing the Uninstall Process".
To uninstall the OKM Manager software:
Navigate to the ”Uninstall_Oracle_ Key_Manager” directory, which resides under the directory where the OKM Manager was installed.
Invoke the ”Uninstall_Oracle_Key_Manager.exe” (Windows) or ”Uninstall_Oracle_Key_Manager” (Solaris) executable to launch the uninstall process.
The Preparing Setup window is displayed, while the install/uninstall program prepares for the uninstall process.
Click Start, select Settings, Control Panel, double-click Add or Remove Programs. The Add or Remove Programs window is displayed. Scroll down the list (if the software is not visible), select Sun KMS Manager, then click the Change/Remove button.
The Preparing Setup window is displayed, while the install/uninstall program prepares for the uninstall process.
The OKM uninstall dialog box is displayed, prompting you to confirm that you want to remove the selected application and all its features.
Click the Next button to continue or click the Cancel button to stop the process and return to the Add or Remove Program window (Windows) or shell prompt (Solaris).
Note: Your connection profiles will not be removed. |
When the uninstall process is completed, the Uninstall Complete window is displayed. Click the Finish button to close this window. Close this window to return to the Add or Remove Program window (Windows) or shell prompt (Solaris).