testkeyserver

The testkeyserver command validates that a configured keyserver is operating correctly, and is available to provide the correct encryption key if needed. It will complete successfully if:

• All nodes can connect to the key server, and successfully authenticate.
• The key server responds to Key Management Interoperability Protocol (KMIP) requests within a reasonable time.
• The key server returns the correct key for this system, which would enable access to encrypted data.

If any of these steps fails, the command will produce an error message.

This command ensures that the key server can connect to both canisters, which means that it makes sure that the:

• IP path is clear
• Certificates are exchanged correctly

This command also ensures that the key server has its configured keys available.