KSS End-User Deployment

Onboarding with the KSS

There are three options when onboarding end users with the KSS:

1. The KSS ID is included in the enterprise configuration file before the end user first launches Atakama.

2. The KSS ID is added to the end user’s local atakama.config before the end user first launches Atakama.

3. The end users initiate onboarding via the CLI using the command:

   atakama profile keyserver-onboard --keyserver-id [ID]

With any of these options, onboarding the end user is automatic and without end-user involvement. Once onboarded, the end user will have received:

1. An Atakama Profile with the default name, username@hostname, containing two devices -- the workstation and the KSS.

2. A personal Security Group.

3. Two default Secure Folders (disabled for non-administrator end users).

The end user may be prompted to configure additional Secure Folders after the onboarding depending on the enterprise configuration.

Sharing

Sharing within the KSS environment is similar to sharing when Atakama is deployed without a KSS. User profiles with access to the Secure Folder locations must still be verified and then granted access by the administrator. The KSS does not support granting access to other profiles, so each Secure Folder must contain at least one additional non-KSS profile.

Additional Commands

Enabling/Disabling the Key Shard Server

All request responses can be disabled via the command

atakama keyserver disable

atakama keyserver enable

atakama keyserver status