adding show peers certificate info, and supporting text around securi… #905
Conversation
docs/enhanced-sec-key-mgmt.md
Outdated
| - `metadata next rekey` - Number of seconds until the next rekey occurs. | ||
| - `metadata manager status` - Indicates whether the current node is Active-Leader or Redundant-Peer, or displays inactive when the feature is not enabled. | ||
|
|
||
| Note that the `Key Manager State` provides the state info for the existing dynamic rekey model and will always show `inactive` for nodes managed by the conductor, while the `Metadata Key Manager State` refers to the key management state for the Enhanced Security Key Management feature. |
There was a problem hiding this comment.
I find this sentence confusing.
Possible alternative (please check with author):
Note that Key Manager State provides state information for the current key exchange and will always show Inactive for nodes managed by the conductor.
(if you are making this statement, explain when the other state transitions happen and why)
The Metadata Key Manager State refers to the key management state for the Enhanced Security Key Management feature.
(if you are making this statement, explain when the other state transitions happen and why)
There was a problem hiding this comment.
Key Manager State provides the state for security dynamic rekey without enhanced-security-key-management. Nodes managed by conductor will always show inactive` as the rekey control process runs on the conductor.
The Metadata Key Manager State refers to the key management state for the Enhanced Security Key Management feature.
…ty key status.