---
title: "Fortanix DSM with Bloombase Storesafe"
slug: "fortanix-dsm-with-bloombase-storesafe"
updated: 2026-07-27T16:40:48Z
published: 2026-07-27T16:40:48Z
canonical: "support.fortanix.com/fortanix-dsm-with-bloombase-storesafe"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Fortanix DSM with Bloombase Storesafe

## 1.0 Introduction

This article describes how to integrate **Bloombase Storesafe** with **Fortanix-Data-Security-Manager (DSM)**.

## 2.0 Configure Fortanix DSM

A Fortanix DSM service must be configured, and the URL must be accessible. To create a Fortanix DSM account and group, refer to the following sections:

### 2.1 Signing Up

To get started with the Fortanix DSM cloud service, you must register an account at <Your_DSM_Service_URL>. For example, [https://amer.smartkey.io.](https://amer.smartkey.io.) On-premises customers use the KMS URL, and the SaaS customers can use the URLs as listed [*here*](https://support.fortanix.com/hc/en-us/articles/4406135346068-Fortanix-DSM-SaaS-Global-Availability-Map) based on the application region.

*For more information on how to set up the Fortanix DSM, refer to the* [*Sign Up for Fortanix Data Security Manager SaaS*](https://support.fortanix.com/docs/users-guide-sign-up-for-fortanix-data-security-manager-saas)*.*

### 2.2 Creating an Account

Access <Your_DSM_Service_URL> in a web browser and enter your credentials to log in to Fortanix DSM.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_SaaS_Login_page(15).png)

**Figure 1: Logging in**

*For more information on how to set up an account in Fortanix DSM, refer to the* [*Getting Started with Fortanix Data Security Manager - UI*](https://support.fortanix.com/docs/users-guide-getting-started-with-fortanix-data-security-manager-ui)*.*

### 2.3 Creating a Group

Perform the following steps to create a group in the Fortanix DSM:

1. In the DSM left navigation panel, click the **Groups** menu item, and then click **ADD GROUP** to create a new group.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_Add_Group(7).png)

**Figure 2: Add groups**
2. On the **Adding new group** page:
  1. **Title**: Enter a name for your group.
  2. **Description** (optional): Enter a short description of the group.
3. Click **SAVE** to create the new group.

*For more information about groups, refer to* [*Definitions*](/v1/docs/dsm-definitions#40-groups)*.*

> [!NOTE]
> TIP
> 
> It is recommended to configure a **Key undo policy** for groups for the cryptographic keys used by the application before creating or using the keys. Without a configured **Key undo policy**, key deletion is permanent and the deleted key cannot be recovered. Deleting an encryption key may result in permanent loss of access to the protected data and service disruption for applications that depend on the deleted key. *For detailed steps, refer to* [*Key Undo Policy*](/v1/docs/fortanix-dsm-key-undo-policy)*.*

### 2.4 Creating an Application

Perform the following steps to create an application (app) in the Fortanix DSM:

1. In the DSM left navigation panel, click the **Apps** menu item, and then click **ADD APP** to create a new app.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_Add_App(3).png)

**Figure 3: Add application**
2. On the **Adding new app** page:
  1. **App name**: Enter the name for your application.
  2. **ADD DESCRIPTION** (optional): Enter a short description of the application.
  3. **Authentication method**: Select the default **API Key** as the authentication method from the drop down menu. *For more information on these authentication methods, refer to the* [*User's Guide: Authentication*](https://support.fortanix.com/docs/users-guide-authentication)*.*
  4. **Assigning the new app to groups**: Select the group created in [*Section 2.3: Creating a Group*](/v1/docs/using-fortanix-data-security-manager-with-bloombase-storesafe#23-creating-a-group)[](/v1/docs/using-data-security-manager-with-idcentral-key-management#43-creating-a-group)from the list.
3. Click **SAVE** to add the new application.

*For more information about applications, refer to* [*Definitions*](https://support.fortanix.com/docs/dsm-definitions#50-applications)*.*

### 2.5 Copying the App UUID

Perform the following steps to copy the app UUID from the Fortanix DSM:

1. In the DSM left navigation panel, click the **Apps** menu item, and then click the app created in [*Section 2.4: Creating an Application*](/v1/docs/using-fortanix-data-security-manager-with-bloombase-storesafe#24-creating-an-application) [](/v1/docs/using-data-security-manager-with-idcentral-key-management#44-creating-an-application)to go to the detailed view of the app.
2. On the **INFO** tab, click **VIEW API KEY DETAILS**.
3. From the **API Key Details** dialog box, copy the **Username (app UUID)** and **Password** to be used in [*Section 3.0 Configuring Bloombase Storesafe*](/v1/docs/using-fortanix-data-security-manager-with-bloombase-storesafe#30-configuring-bloombase-storesafe) as the value of Common Name (CN) to generate the certificate.

## 3.0 Configure Bloombase Storesafe

Perform the following steps:

1. On the Bloombase Storesafe Console, select **OASIS KMIP Key Manager** from the Bloombase Storesafe main menu.

![Picture3.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture3.png)

**Figure 4: OASIS KMIP key manager**
2. Click **Add**.
3. On the **Modify KMIP Key Manager** page:
  1. Fill in the name that you want to use to identify with this instance of Fortanix DSM as the KMIP Server.
  2. For the **Model** field, select **Generic**.
  3. Specify the Hostname/IP Address of the Fortanix DSM cluster.
  4. Leave the **Port** as default **5696**.
  5. Leave the **Timeout** and **Retry Count** info as default unless you have a specific setting you want to use.
  6. Leave the **Username** and **Password** blank.
  7. Click **Submit** to save the information.

![Picture4.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture4.png)

**Figure 5: Modifying the KMIP key manager**
4. Select **Create** for the client keystore to create a Rivest, Shamir, Adleman (RSA) key pair, and a Certificate Signing Request (CSR).

![Picture5.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture5.png)

**Figure 6: Creating an RSA keypair and a CSR request**
5. Specify the algorithm/key sizes you want for your keypair, the values for the certificate Distinguished Name (DN), and then click **Generate** to generate the certificate request**.**

![Picture6.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture6.png)

**Figure 7: Generating a certificate request**

> [!NOTE]
> NOTE
> 
> You must specify the app UUID as copied in [*Section 2.5: Copying an App UUID*](/v1/docs/using-fortanix-data-security-manager-with-bloombase-storesafe#25-copying-the-app-uuid) as the CN of the certificate request.
6. Click **Certificate Request** to download the CSR and send it to your CA for certificate issuance.

![Picture7.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture7.png)

**Figure 8: Sending a certificate request**
7. Upload the CA Public Certificate used to sign the CSR to the Trust Certificate Store.

![Picture8.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture8.png)

**Figure 9: Uploading the trust certificate**
8. Upload the signed certificate to the Client Keystore.

![Picture9.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture9.png)

**Figure 10: Uploading the signed certificate**
9. Upload the Fortanix DSM cluster certificate to the Trust Certificate Store.

![Picture10.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture10.png)

**Figure 11: Uploading the Fortanix DSM Cluster Certificate**
10. Click **Submit** to save the configuration.

![Picture11.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture11.png)

**Figure 12: Submitting the certificates**

## 4.0 Update the Authentication Method

Perform the following steps to change the authentication method:

1. Go to the detailed view of the app created in [*Section 2.4: Creating an Application*](/v1/docs/using-fortanix-data-security-manager-with-bloombase-storesafe#24-creating-an-application) and click **Change authentication method** and select **Certificate** to change the authentication method to Certificate.
2. Click **SAVE**.
3. On the **Add certificate** dialog box, click **UPLOAD NEW CERTIFICATE** to upload the certificate file or paste the content of the certificate generated in the previous section.
4. Select both the check boxes to confirm your understanding of the action.
5. Click **UPDATE** to save the changes.

## 5.0 Create a Security Object

Perform the following steps to generate an AES key in the Fortanix DSM:

1. In the DSM left navigation panel, click the**Security Objects** menu item, and then click **ADD SECURITY OBJECT** to create a new security object.

![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Add-SO(9).png)

**Figure 13: Adding security object**
2. On the**Add new Security Object** page,
  1. **Security Object name**: Enter the name of your security object.
  2. **Group**: Select the group as created in [*Section 2.3: Creating a Group*](/v1/docs/using-fortanix-data-security-manager-with-bloombase-storesafe#23-creating-a-group).
  3. Select**GENERATE**.
  4. In the **Choose a type** section, select the **AES** key type.
  5. In the **Key Size** section, select the size of the key in bits.
  6. In the **Key operations permitted** section, select the required operations to define the actions that can be performed with the cryptographic keys, such as encryption, decryption, signing, and verifying.
3. Click**GENERATE**to create the new security object.

*For more information about security objects, refer to* [*Definitions*](https://support.fortanix.com/docs/dsm-definitions#60-security-objects)*.*

## 6.0 Configure Fortanix DSM KMIP Entity in Bloombase Storesafe

Perform the following steps:

1. In the Bloombase Console for the KMIP Key Manager, open the Fortanix DSM KMIP entity.

![Picture19.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture19.png)

**Figure 14: Fortanix DSM KMIP entity**
2. Click **Test**.

![Picture20.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture20.png)

**Figure 15: Testing the connection**
3. The successful test confirms that Bloombase Storesafe can authenticate and connect to Fortanix DSM.

![Picture21.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture21.png)

**Figure 16: Connection is successful**
4. To select the key created in Fortanix DSM in the Bloombase Storesafe Key Wrapper, click **Create Key Wrapper**.

![Picture22.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture22.png)

**Figure 17: Creating a key wrapper**
5. Under **Modify Key Wrapper**, select the Fortanix DSM entity that you configured in Bloombase Storesafe in [*Section 3.0: Configuring Bloombase Storesafe*](/v1/docs/using-fortanix-data-security-manager-with-bloombase-storesafe#30-configuring-bloombase-storesafe) and select the key created under the **Object** drop down menu and click **Select Key**.

![Picture23.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture23.png)

**Figure 18: Selecting the key**
6. Click **Submit** to submit the updated configuration.

![Picture24.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture24.png)

**Figure 19: Submitting the updated configuration**
7. Confirm the key has been properly selected by clicking **Find Key Wrapper**, and then click **Find**.

![Picture25.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/picture25.png)

**Figure 20: Finding the key**

You can now use the Fortanix DSM KMIP server as a Key Management System (KMS) for all storage encryption implemented with Bloombase Storesafe. *Refer to the* [*Bloombase Storesafe*](https://www.bloombase.com/products/storesafe/) *documentation for implementing the specific storage encryption use case you have.*

Fortanix Data Security Manager (DSM) is the world’s first cloud service secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as other secrets such as passwords, API keys, tokens, or any blob of data. Your business-critical applications and containers can integrate with Fortanix DSM using legacy cryptographic interfaces (PKCS#11, CNG, and JCE) or using the native Fortanix DSM RESTful interface.

## Related

- [Fortanix DSM as External KMIP in Rubrik](/fortanix-dsm-as-external-kmip-in-rubrik.md)