Request the server to generate a new symmetric key as a Managed Cryptographic Object.

Requests the server to generate a new public/private key pair and register the two corresponding new Managed Cryptographic Objects.

requests the server to register a Managed Object that was created by the client or 996 obtained by the client through some other means, allowing the server to manage the object

generate a replacement key for an existing symmetric key.

derive a symmetric key using a key or secret data that is already known to the key management system.

generate a Certificate object for a public key.

renew an existing certificate with the same key pair.

Request that the server search for one or more Managed Objects, specified by one or more attributes.

request that the server check for the use of a Managed Object according to values specified in the request

requests that the server returns the Managed Object specified in the request by its Unique Identifier

Returns one or more attributes of a given Managed Object.

returns a list of the attribute names associated with a Managed Object.

adds a new attribute instance to a Managed Object and sets its value.

modifies the value of an existing attribute instance associated with a Managed Object.

deletes an attribute associated with a Managed Object.

obtain a new Lease Time for a specified Managed Object.

obtain an allocation from the current Usage Limits values to allow the client to use the Managed Cryptographic Object for applying cryptographic protection.

activate a Managed Cryptographic Object.

revoke a Managed Cryptographic Object or an Opaque Object.

indicate to the server that the key material for the specified Managed Object SHALL be destroyed.

specify that a Managed Object MAY be archived.

obtain access to a Managed Object that has been archived.

requests that the server validate a certificate chain and return information on its validity.

interrogate the server to determine its capabilities and/or protocol mechanisms.

cancel an outstanding asynchronous operation.

poll the server in order to obtain the status of an outstanding asynchronous operation.

The P1619.3 KMIP service provides support for the OASIS Key Management Interoperability Protocol (KMIP) with IEEE 1619.3 Extensions