KMIP 1.3Deprecation

February 20, 2014

Deprecation• 5.1 KMIP Deprecation Rule• Items in the normative KMIP Specification [KMIP-Spec] document can be

marked deprecated in any document version, but will be removed only in a major version. Similarly, conformance clauses or other normative information in the KMIP Profiles [KMIP-Prof] document can be deprecated in any document version, but removed only in a major version. Information in the non-normative KMIP Use Cases [KMIP-UC], KMIP Usage Guide [this document] and KMIP Test Cases [KMIP-TC] documents may be removed in any document version.– Deprecation should be noted at the start of the section being deprecated

• In KMIP 1.2 we deprecated certificate object type PGP along with other deprecated version 1.1 attributes– V1.2 PGP certificate type attribute (2.2.1, 3.8, 9.1.3.2.6, 9.1.3.2.22)– V1.1 Certificate Identifier (3.13, 9.1.3.1)– V1.1 Certificate Subject (3.14, 9.1.3.1)– V1.1 Certificate Issuer (3.15, 9.1.3.1)

Context

• We have discussed removal of a number of items in KMIP 2.0

• If we are going to remove them then we should be marking items as deprecated in KMIP 1.3.

Candidates for Deprecation• Templates (all of 2.2.6 and all references)– Should be replaced or fixed

• Operation Policy Name (all of section 3.18)– Should be removed until Policy has been better defined– Extensions can be used for policy information in Profiles

• Transparent EC key formats (the algorithm specific ones which are all the same).– Consolidate to a single structure

• Locate functions return 0 values returned successfully or optionally returns destroyed items– Deprecation or fix for a change in behavior

Suggested Next Steps

• Create Ballots– Create a 14 day Ballot for each proposed

deprecation

• If deprecation ballot approved– Review affects on other documents (Profiles,

Usage Guide, Use Cases and Test Cases)