InlineDneKeyPolicy1

InlineDneKeyPolicy1
InlineDneKeyPolicy1
JSON Example 
{
    "is_default": false,
    "encrypt_algorithm": "string",
    "mac_algorithm": "string",
    "type": "string",
    "encrypt_type": "string",
    "rekey_frequency": 0,
    "notes": "string",
    "is_sys_default": false
}
boolean
is_default
Optional

It is a boolean flag which reflects whether a DNE key policy is default or not.

string
encrypt_algorithm
Required

DNE key encryption algorithm

Possible values are : ENC_NULL, ENC_AES_GCM_128,
string
mac_algorithm
Required

MAC algorithm type

string
type
Optional

key policy type

Possible values are : REGULAR, BUM_TRAFFIC,
string
encrypt_type
Required

Key policy encryption type

Possible values are : INTEGRITY_ONLY, ENCRYPTION_AND_INTEGRITY,
integer As int64 As int64
rekey_frequency
Optional

Frequency of key policy rekey (in seconds). Default 30 days, minimum 1 day, maximum 10000 days.

string
notes
Optional

User notes specific to the key policy.

boolean
is_sys_default
Optional

It is a boolean flag which reflects whether a DNE key policy is system default or not. System default key policies are created while dne system is booting up. User can't change the value of the system default flag. User created key policy always has system default flag set to false, however a user can change default flag (not the system default) value from false to true of any key policy, but not from true to false (when setting a key policy as default, the current default key policy is automatically unset).

Used By