Before you start

verify your environment meets these requirements supported hardware {{k3}} , application version 6 3 1 x or later, with the kmip license enabled required access an account on the kmes with administrator permissions to create roles, identities, tls pki, and update system settings local administrator/root access on the netapp ontap server network and firewall outbound tcp/5696 from the netapp ontap server to the kmes series 3 fqdn or cidr (for example, kmes example com or 10 0 0 0/24 ) tls inspection or ssl proxies can break mutual tls handshakes exempt the kmes fqdn(s) from inspection configure the kmes series 3 with an fqdn so the exemption applies