Software Secure Workload
Activity Configure

Getting Kafka Client Certificates

  • Create a user role with capability “Owner” and assign it to a user account of choice:

    User role configuration to receive policies from Kafka
    Figure 1: User Role Configuration to Receive Policies from Kafka
  • Perform policies enforcement as described in Enforce Policies. This first step is necessary as it creates a Kafka topic that is associated with active scope.

  • Navigate to Manage > Data Tap Admin

  • Select the tab “Data Taps” and download Kafka client certificates by clicking on the download button under column “Actions”. Make sure to select the Java Keystore format in the download dialog.

    Data Taps view
    Figure 2: Data Taps View
  • The downloaded clients certificates file usually has a name like Policy-Stream-10-Policies- Subscription.jks.tar.gz. Create a directory and unpack it underneath the created directory as below:

    
        mkdir Policy-Stream-10-Policies-Subscription
        tar -C Policy-Stream-10-Policies-Subscription -zxf Policy-Stream-10-Policies-Subscription.jks.tar.gz