Verify the KMIP connection
The primary verification tool is the Server Configuration Test within Storage Navigator.1
In Storage Navigator, navigate to Administration > Encryption Keys.
2
Select Edit Encryption Environmental Settings.
3
Under Server Configuration Test, select the Check button. This performs a live TLS handshake and KMIP protocol negotiation with both the primary and secondary servers.
4
A successful test confirms that the network path, certificates, and KMIP protocol are all working correctly. If the test fails, the error message identifies the specific problem (certificate mismatch, network unreachable, authentication failure, etc.).
Verify encryption keys on the CryptoHub
1
Log in to the CryptoHub web UI.
2
Navigate to the Key Management section and select Key Database.
3
Verify that new symmetric key objects have been created by the Hitachi VSP.
4
Check the CryptoHub’s KMIP activity logs for Create, Get, and Activate operations originating from the SVP IP address.
Check the audit log
1
In Storage Navigator, access the Audit Log to review all interactions between the VSP and the CryptoHub.
2
Confirm that key generation events, backup operations, and KEK retrievals are being recorded successfully.