MTG KMS Crypto API Server

The MTG KMS Crypto API Server provides cryptography functions via a rest API, including the generation and management of keys and certificates. For the actual functionalities and storage, The MTG KMS Crypto API Server uses the KMIP interface of the MTG KMS-Server.

Access to the API is authorized using JWT. A keycloak server is used to issue these tokens. The certificates for the verification of the JWT are loaded from the keycloak server.

When the application is started, the MTG KMS Crypto API Server opens a TCP listener on port 8607 and 8807. These are the default ports, which can be changed by configuration.

In this section: