Upload
agnes-logan
View
222
Download
1
Tags:
Embed Size (px)
Citation preview
What is the proposal?
• Host a KMIP interoperability program which includes:
– Publishing a set of interoperability tests– Maintaining a site with KMIP server
implementation (s) to test against– Maintaining a web site with a list of members
and results from the KMIP interoperability testing– Making a portion of the web site available to
each member to publish more documentation on their KMIP implementation with pointers back to their own web sites
What does it mean to be included?
Documented results of at a minimum a vendor’s KMIP client interaction with a KMIP server implementation
Document test resultsDocument how to configure diagnostics to trouble shoot a configurationDocument release levels tested
Focus is on providing material for vendor support organizations
What we are not focusing on:
Formal certification Validation of KMIP implementation internal operationsClaims of security or function outside of the KMIP specification
Levels of Interoperability Testing
New specification items - pre-finalization of the specification proposals / updates
We are suggesting that this is handled through the KMIP interop process we have been using currently
With agreed to KMIP specifications and profilesWe are suggesting hosting server implementations and clients in a neutral hosting facility
Interoperability lab testing has multiple phases:Private testing – used during development or validation - confidentialPublic testing – once interoperability and meeting conformance is achieved then a documented public test to demonstrate
Formal compliance testing – branding and versioning
New protocol elements and versions
Current team for interop has successfully gotten to a agreed to specification
Rough consensus and working codeValidate that new proposals do not have implementation challenges
Challenges with this approach for other purposes:Bilateral configurations for testingEach company has to host servers outside the corporate networkNot public – can not point customers to a site that shows interoperability resultsAs companies ship products they want demonstrated interoperability against know versions of products
Private testing in a hosted interoperability lab
Clients or servers schedule testingEstimate of a month for a clientHosting environment needs to :
set up ids for firewall traversalIds to get read only access to server logsScheduling of testing windows
Opportunity for clients to validate their implementations in private
Clients get access to server logs and diagnostic and error reporting for trouble shootingTesting is private and confidential
Public testing in a hosted interoperability lab
Hosted environment for:KMIP serversKMIP client test harness
Clients declare readiness to run public testModerated test
Captures logsReviews conformance to stated specification and profile
Success is declared
Public web site
Lists products that have completed interoperability testing
Product identification with versionsKMIP specification level and profile(s) supportedDescription of the usage modelConfiguration exampleLogs documenting the resultsDiagnostics and documentation links to the vendor site
How to fund the interoperability lab
Web siteDescribes testsDescribes program and how to joinPublishes implementations that have passed interoperability testing
Server implementationsCost for hosting of physical or virtual server
Client implementationsCost for 2 months per year of testingWeb site for documenting results
Contractor resourcesManage hosted resourcesSchedule testing
Committee Defines test casesReviews and approves test results
SSIFSSIF
TutorialsWhite PapersArticlesSolutions Guides Best Current Practices
Creating, Publishing and Presenting
Storage Security Industry Forum
Join the SSIF and help lead the way to a better understanding of storage security.
What are the costs?• SNIA/SSIF membership
– $5000 for > $50 million company– $1000 for < $50 million company– Non-storage centric restriction
• SNIA/SSIF will maintain– Interop test site– Web site for interop results– Meet regularly to review interop results– Meet infrequently to update interop tests– Provide marketing presence for member companies
to point to 3rd party KMIP validation