Connect Quorum Key Manager

Codefi Orchestrate uses Quorum Key Manager (QKM) as a key management service. Use the following environment variables to configure QKM when starting the Orchestrate Transaction Sender and Orchestrate Gateway.

tip

Configure each microservice using microservice-specific environment variables. Command line options are also available and take precedence over environment variables.

Configuration

Environment variable	Command line option	Description
KEY_MANAGER_URL	key-manager-url	URL of Quorum Key Manager
KEY_MANAGER_METRICS_URL	key-manager-metrics-url	URL of Quorum Key Manager metrics

Authentication

You can configure authentication using the following environment variables.

Environment variable	Command line option	Description
KEY_MANAGER_API_KEY	key-manager-api-key	API key of the HTTP authentication
KEY_MANAGER_CLIENT_TLS_CERT	key-manager-client-tls-cert	Path to the TLS authentication certificate file
KEY_MANAGER_CLIENT_TLS_KEY	key-manager-client-tls-key	Path to the TLS authentication key file
KEY_MANAGER_TLS_SKIP_VERIFY	key-manager-tls-skip-verify	Set to true to skip TLS authentication verification

If user credentials, such as JWTs, are provided, Orchestrate forwards them to Quorum Key Manager.

Ethereum Store

Environment variable	Command line option	Description
KEY_MANAGER_STORE_NAME	key-manager-store-name	Quorum Key Manager Store