Deleting a generic KMIP client or a cryptographic object

You can delete a generic KMIP client and its cryptographic objects from the IBM Guardium Key Lifecycle Manager database when they are no longer needed.

Before you begin

  • Ensure that your role has the required permissions to delete a generic KMIP client and cryptographic object.
  • Ensure that the current backup for the IBM Guardium Key Lifecycle Manager database exists.
  • If you want to delete a generic KMIP client, ensure that it does not have any associated cryptographic objects.

About this task

You can delete a generic KMIP client from the graphical user interface or by using REST APIs. Cryptographic objects that are associated with a generic KMIP client that uses KMIP for communication can be deleted via the applicable KMIP operation. Cryptographic objects that are associated with a generic KMIP client that uses REST APIs for communication can be deleted by using IBM Guardium Key Lifecycle Manager REST APIs.

Procedure

  1. To delete a cryptographic object that is associated with:
    Option Description
    Client that uses REST APIs for communicating with the IBM Guardium Key Lifecycle Manager server Delete Object REST Service.
    Client that uses KMIP for communicating with the IBM Guardium Key Lifecycle Manager server Appropriate KMIP operation. See http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=kmip.
  2. To delete a generic KMIP client from the graphical user interface, complete the following steps.
    1. Log in to the graphical user interface.
    2. On the home page, click the menu icon (Menu icon) at the upper left of the page.
    3. Click Endpoint management > Configured endpoints.
    4. On the Configured endpoints page, select your generic KMIP client and click the overflow menu icon (Options).
      Ensure that there are no cryptographic objects associated with the generic KMIP client that you want to delete. If not, delete them first.
    5. From the overflow menu options, click Delete.
    6. On the confirmation window, click OK.
    Alternatively, you can use the Delete Generic KMIP Client REST Service.