Security > Secure Key Manager > Console User Guide > Approval Feature
This document describes the approval features of Secure Key Manager that you use to meet the requirements for secure encryption key management as required by national and international security certification audits (ISMS-P, ISO, etc.).
The document explores how to Enable Approval Feature, setting up approval-related roles, the differences between before and after, and the Approval Process after enabling the feature.
Enable Approval Feature
How to Enable Approval Feature
Enable Approval Feature of Secure Key Manager in Approval Process Management Setting on Governance Setting under Organization Management.
Set up Roles for Approval Feature
On Member Management in Secure Key Manager, perform the approval process by obtaining the approver role (APPROVAL ADMIN) and the requester role (APPROVAL MEMBER).
Differences with Approval Feature enabled
When you obtain the approver or requester role after enabling the approval feature, the Approval List and Key Store Management tabs are added to Secure Key Manager. Only the approver and requester can access these tabs.
When you enable the approval feature, data can no longer be added, modified, or deleted in the key store. When requesting for change, move to the Key Store Management tab.
Approval Process
Make Approval Requests
On the Key Store Management tab, the approver and requester make a request for approval of changes for each key store. Addition, modification, and deletion are performed through a similar operation to the existing keystore. Changes to keys and authentication information are displayed in Status as follows.
Make a request for approval with the Request Approval button in the key store, and the requests made for a project can be found in the Approval List tab.
Apply Approval Requests
On the Approval List tab, the approver confirms the requst for approval of changes and determines whether to apply the request by selecting Approve or Deny.
The request is applied immediately upon clicking Approve. The change can be found in the Key Depository or the Key Store Management tab.
