Teamcenter Key Manager

Caution Teamcenter Key Manager is deprecated and unavailable for installation beginning in Teamcenter 2606. Use Teamcenter vault to manage secrets. Teamcenter Key Manager is an optionally-installed feature that enables you to manage, edit, and share encryption keys and policies in a centralized secure manner for a distributed Teamcenter site. Teamcenter Key Manager consists of a central key manager server which delegates key storage and cryptography to the public key cryptography standard PKCS #11 hardware or software plugin of your choice. Default Network Security Services (NSS) is delivered with Teamcenter Key Manager. Customized Network Security Services (NSS) and hardware security modules (HSM) are also supported. Trusted Teamcenter satellites communicate with the key manager server using two-way SSL to share keys and perform cryptography for features and applications such as Teamcenter two-tier rich clients and Dispatcher. With Teamcenter Key Manager, you can define component-specific policies governing the algorithms used for key generation and the key encryption and decryption life times. The key manager server, where all policies and keys are stored, resides on single host, accessed over secure HTTPS on a dedicated configurable port with two-way transport layer security. A key manager satellite resides on each enterprise tier host, and accesses the key manager server over HTTPS. An optional secondary key manager server maintains synchronization with the primary key manager server, and automatically acts as a failover server for satellites if the primary key manager server becomes unavailable. The secondary server resides on a separate host than the primary server. For sites using Teamcenter Key Manager, if key manager servers or the satellites are not running, users will not be able to log into Teamcenter.