1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectVpnKmipserver
fortimanager 1.15.0 published on Thursday, Nov 13, 2025 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectVpnKmipserver

fortimanager logo
fortimanager 1.15.0 published on Thursday, Nov 13, 2025 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

    KMIP server entry configuration.

    The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.

    • server_list: fortimanager.ObjectVpnKmipserverServerlist

    Create ObjectVpnKmipserver Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectVpnKmipserver(name: string, args?: ObjectVpnKmipserverArgs, opts?: CustomResourceOptions);
    @overload
def ObjectVpnKmipserver(resource_name: str,
                        args: Optional[ObjectVpnKmipserverArgs] = None,
                        opts: Optional[ResourceOptions] = None)

@overload
def ObjectVpnKmipserver(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        adom: Optional[str] = None,
                        dynamic_sort_subtable: Optional[str] = None,
                        interface_select_method: Optional[str] = None,
                        interfaces: Optional[Sequence[str]] = None,
                        name: Optional[str] = None,
                        object_vpn_kmipserver_id: Optional[str] = None,
                        passwords: Optional[Sequence[str]] = None,
                        scopetype: Optional[str] = None,
                        server_identity_check: Optional[str] = None,
                        server_lists: Optional[Sequence[ObjectVpnKmipserverServerListArgs]] = None,
                        source_ip: Optional[str] = None,
                        ssl_min_proto_version: Optional[str] = None,
                        username: Optional[str] = None,
                        vrf_select: Optional[float] = None)
    func NewObjectVpnKmipserver(ctx *Context, name string, args *ObjectVpnKmipserverArgs, opts ...ResourceOption) (*ObjectVpnKmipserver, error)
    public ObjectVpnKmipserver(string name, ObjectVpnKmipserverArgs? args = null, CustomResourceOptions? opts = null)
    public ObjectVpnKmipserver(String name, ObjectVpnKmipserverArgs args)
public ObjectVpnKmipserver(String name, ObjectVpnKmipserverArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectVpnKmipserver
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ObjectVpnKmipserverArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectVpnKmipserverArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectVpnKmipserverArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectVpnKmipserverArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectVpnKmipserverArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectVpnKmipserverResource = new Fortimanager.ObjectVpnKmipserver("objectVpnKmipserverResource", new()
{
    Adom = "string",
    DynamicSortSubtable = "string",
    InterfaceSelectMethod = "string",
    Interfaces = new[]
    {
        "string",
    },
    Name = "string",
    ObjectVpnKmipserverId = "string",
    Passwords = new[]
    {
        "string",
    },
    Scopetype = "string",
    ServerIdentityCheck = "string",
    ServerLists = new[]
    {
        new Fortimanager.Inputs.ObjectVpnKmipserverServerListArgs
        {
            Certs = new[]
            {
                "string",
            },
            Id = 0,
            Port = 0,
            Server = "string",
            Status = "string",
        },
    },
    SourceIp = "string",
    SslMinProtoVersion = "string",
    Username = "string",
    VrfSelect = 0,
});

    example, err := fortimanager.NewObjectVpnKmipserver(ctx, "objectVpnKmipserverResource", &fortimanager.ObjectVpnKmipserverArgs{
	Adom:                  pulumi.String("string"),
	DynamicSortSubtable:   pulumi.String("string"),
	InterfaceSelectMethod: pulumi.String("string"),
	Interfaces: pulumi.StringArray{
		pulumi.String("string"),
	},
	Name:                  pulumi.String("string"),
	ObjectVpnKmipserverId: pulumi.String("string"),
	Passwords: pulumi.StringArray{
		pulumi.String("string"),
	},
	Scopetype:           pulumi.String("string"),
	ServerIdentityCheck: pulumi.String("string"),
	ServerLists: fortimanager.ObjectVpnKmipserverServerListTypeArray{
		&fortimanager.ObjectVpnKmipserverServerListTypeArgs{
			Certs: pulumi.StringArray{
				pulumi.String("string"),
			},
			Id:     pulumi.Float64(0),
			Port:   pulumi.Float64(0),
			Server: pulumi.String("string"),
			Status: pulumi.String("string"),
		},
	},
	SourceIp:           pulumi.String("string"),
	SslMinProtoVersion: pulumi.String("string"),
	Username:           pulumi.String("string"),
	VrfSelect:          pulumi.Float64(0),
})

    var objectVpnKmipserverResource = new ObjectVpnKmipserver("objectVpnKmipserverResource", ObjectVpnKmipserverArgs.builder()
    .adom("string")
    .dynamicSortSubtable("string")
    .interfaceSelectMethod("string")
    .interfaces("string")
    .name("string")
    .objectVpnKmipserverId("string")
    .passwords("string")
    .scopetype("string")
    .serverIdentityCheck("string")
    .serverLists(ObjectVpnKmipserverServerListArgs.builder()
        .certs("string")
        .id(0.0)
        .port(0.0)
        .server("string")
        .status("string")
        .build())
    .sourceIp("string")
    .sslMinProtoVersion("string")
    .username("string")
    .vrfSelect(0.0)
    .build());

    object_vpn_kmipserver_resource = fortimanager.ObjectVpnKmipserver("objectVpnKmipserverResource",
    adom="string",
    dynamic_sort_subtable="string",
    interface_select_method="string",
    interfaces=["string"],
    name="string",
    object_vpn_kmipserver_id="string",
    passwords=["string"],
    scopetype="string",
    server_identity_check="string",
    server_lists=[{
        "certs": ["string"],
        "id": 0,
        "port": 0,
        "server": "string",
        "status": "string",
    }],
    source_ip="string",
    ssl_min_proto_version="string",
    username="string",
    vrf_select=0)

    const objectVpnKmipserverResource = new fortimanager.ObjectVpnKmipserver("objectVpnKmipserverResource", {
    adom: "string",
    dynamicSortSubtable: "string",
    interfaceSelectMethod: "string",
    interfaces: ["string"],
    name: "string",
    objectVpnKmipserverId: "string",
    passwords: ["string"],
    scopetype: "string",
    serverIdentityCheck: "string",
    serverLists: [{
        certs: ["string"],
        id: 0,
        port: 0,
        server: "string",
        status: "string",
    }],
    sourceIp: "string",
    sslMinProtoVersion: "string",
    username: "string",
    vrfSelect: 0,
});

    type: fortimanager:ObjectVpnKmipserver
properties:
    adom: string
    dynamicSortSubtable: string
    interfaceSelectMethod: string
    interfaces:
        - string
    name: string
    objectVpnKmipserverId: string
    passwords:
        - string
    scopetype: string
    serverIdentityCheck: string
    serverLists:
        - certs:
            - string
          id: 0
          port: 0
          server: string
          status: string
    sourceIp: string
    sslMinProtoVersion: string
    username: string
    vrfSelect: 0

    ObjectVpnKmipserver Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectVpnKmipserver resource accepts the following input properties:

    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    Interfaces List<string>
    Specify outgoing interface to reach server.
    Name string
    KMIP server entry name.
    ObjectVpnKmipserverId string
    an identifier for the resource with format {{name}}.
    Passwords List<string>
    Password to use for connectivity to the KMIP server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServerIdentityCheck string
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    ServerLists List<ObjectVpnKmipserverServerList>
    Server-List. The structure of server_list block is documented below.
    SourceIp string
    FortiGate IP address to be used for communication with the KMIP server.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    Username string
    User name to use for connectivity to the KMIP server.
    VrfSelect double
    VRF ID used for connection to server.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    Interfaces []string
    Specify outgoing interface to reach server.
    Name string
    KMIP server entry name.
    ObjectVpnKmipserverId string
    an identifier for the resource with format {{name}}.
    Passwords []string
    Password to use for connectivity to the KMIP server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServerIdentityCheck string
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    ServerLists []ObjectVpnKmipserverServerListTypeArgs
    Server-List. The structure of server_list block is documented below.
    SourceIp string
    FortiGate IP address to be used for communication with the KMIP server.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    Username string
    User name to use for connectivity to the KMIP server.
    VrfSelect float64
    VRF ID used for connection to server.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces List<String>
    Specify outgoing interface to reach server.
    name String
    KMIP server entry name.
    objectVpnKmipserverId String
    an identifier for the resource with format {{name}}.
    passwords List<String>
    Password to use for connectivity to the KMIP server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serverIdentityCheck String
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    serverLists List<ObjectVpnKmipserverServerList>
    Server-List. The structure of server_list block is documented below.
    sourceIp String
    FortiGate IP address to be used for communication with the KMIP server.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username String
    User name to use for connectivity to the KMIP server.
    vrfSelect Double
    VRF ID used for connection to server.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces string[]
    Specify outgoing interface to reach server.
    name string
    KMIP server entry name.
    objectVpnKmipserverId string
    an identifier for the resource with format {{name}}.
    passwords string[]
    Password to use for connectivity to the KMIP server.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serverIdentityCheck string
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    serverLists ObjectVpnKmipserverServerList[]
    Server-List. The structure of server_list block is documented below.
    sourceIp string
    FortiGate IP address to be used for communication with the KMIP server.
    sslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username string
    User name to use for connectivity to the KMIP server.
    vrfSelect number
    VRF ID used for connection to server.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interface_select_method str
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces Sequence[str]
    Specify outgoing interface to reach server.
    name str
    KMIP server entry name.
    object_vpn_kmipserver_id str
    an identifier for the resource with format {{name}}.
    passwords Sequence[str]
    Password to use for connectivity to the KMIP server.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    server_identity_check str
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    server_lists Sequence[ObjectVpnKmipserverServerListArgs]
    Server-List. The structure of server_list block is documented below.
    source_ip str
    FortiGate IP address to be used for communication with the KMIP server.
    ssl_min_proto_version str
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username str
    User name to use for connectivity to the KMIP server.
    vrf_select float
    VRF ID used for connection to server.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces List<String>
    Specify outgoing interface to reach server.
    name String
    KMIP server entry name.
    objectVpnKmipserverId String
    an identifier for the resource with format {{name}}.
    passwords List<String>
    Password to use for connectivity to the KMIP server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serverIdentityCheck String
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    serverLists List<Property Map>
    Server-List. The structure of server_list block is documented below.
    sourceIp String
    FortiGate IP address to be used for communication with the KMIP server.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username String
    User name to use for connectivity to the KMIP server.
    vrfSelect Number
    VRF ID used for connection to server.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectVpnKmipserver resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectVpnKmipserver Resource

    Get an existing ObjectVpnKmipserver resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectVpnKmipserverState, opts?: CustomResourceOptions): ObjectVpnKmipserver
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        adom: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        interface_select_method: Optional[str] = None,
        interfaces: Optional[Sequence[str]] = None,
        name: Optional[str] = None,
        object_vpn_kmipserver_id: Optional[str] = None,
        passwords: Optional[Sequence[str]] = None,
        scopetype: Optional[str] = None,
        server_identity_check: Optional[str] = None,
        server_lists: Optional[Sequence[ObjectVpnKmipserverServerListArgs]] = None,
        source_ip: Optional[str] = None,
        ssl_min_proto_version: Optional[str] = None,
        username: Optional[str] = None,
        vrf_select: Optional[float] = None) -> ObjectVpnKmipserver
    func GetObjectVpnKmipserver(ctx *Context, name string, id IDInput, state *ObjectVpnKmipserverState, opts ...ResourceOption) (*ObjectVpnKmipserver, error)
    public static ObjectVpnKmipserver Get(string name, Input<string> id, ObjectVpnKmipserverState? state, CustomResourceOptions? opts = null)
    public static ObjectVpnKmipserver get(String name, Output<String> id, ObjectVpnKmipserverState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectVpnKmipserver    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    Interfaces List<string>
    Specify outgoing interface to reach server.
    Name string
    KMIP server entry name.
    ObjectVpnKmipserverId string
    an identifier for the resource with format {{name}}.
    Passwords List<string>
    Password to use for connectivity to the KMIP server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServerIdentityCheck string
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    ServerLists List<ObjectVpnKmipserverServerList>
    Server-List. The structure of server_list block is documented below.
    SourceIp string
    FortiGate IP address to be used for communication with the KMIP server.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    Username string
    User name to use for connectivity to the KMIP server.
    VrfSelect double
    VRF ID used for connection to server.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    InterfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    Interfaces []string
    Specify outgoing interface to reach server.
    Name string
    KMIP server entry name.
    ObjectVpnKmipserverId string
    an identifier for the resource with format {{name}}.
    Passwords []string
    Password to use for connectivity to the KMIP server.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServerIdentityCheck string
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    ServerLists []ObjectVpnKmipserverServerListTypeArgs
    Server-List. The structure of server_list block is documented below.
    SourceIp string
    FortiGate IP address to be used for communication with the KMIP server.
    SslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    Username string
    User name to use for connectivity to the KMIP server.
    VrfSelect float64
    VRF ID used for connection to server.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces List<String>
    Specify outgoing interface to reach server.
    name String
    KMIP server entry name.
    objectVpnKmipserverId String
    an identifier for the resource with format {{name}}.
    passwords List<String>
    Password to use for connectivity to the KMIP server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serverIdentityCheck String
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    serverLists List<ObjectVpnKmipserverServerList>
    Server-List. The structure of server_list block is documented below.
    sourceIp String
    FortiGate IP address to be used for communication with the KMIP server.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username String
    User name to use for connectivity to the KMIP server.
    vrfSelect Double
    VRF ID used for connection to server.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interfaceSelectMethod string
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces string[]
    Specify outgoing interface to reach server.
    name string
    KMIP server entry name.
    objectVpnKmipserverId string
    an identifier for the resource with format {{name}}.
    passwords string[]
    Password to use for connectivity to the KMIP server.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serverIdentityCheck string
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    serverLists ObjectVpnKmipserverServerList[]
    Server-List. The structure of server_list block is documented below.
    sourceIp string
    FortiGate IP address to be used for communication with the KMIP server.
    sslMinProtoVersion string
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username string
    User name to use for connectivity to the KMIP server.
    vrfSelect number
    VRF ID used for connection to server.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interface_select_method str
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces Sequence[str]
    Specify outgoing interface to reach server.
    name str
    KMIP server entry name.
    object_vpn_kmipserver_id str
    an identifier for the resource with format {{name}}.
    passwords Sequence[str]
    Password to use for connectivity to the KMIP server.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    server_identity_check str
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    server_lists Sequence[ObjectVpnKmipserverServerListArgs]
    Server-List. The structure of server_list block is documented below.
    source_ip str
    FortiGate IP address to be used for communication with the KMIP server.
    ssl_min_proto_version str
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username str
    User name to use for connectivity to the KMIP server.
    vrf_select float
    VRF ID used for connection to server.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    interfaceSelectMethod String
    Specify how to select outgoing interface to reach server. Valid values: auto, sdwan, specify.
    interfaces List<String>
    Specify outgoing interface to reach server.
    name String
    KMIP server entry name.
    objectVpnKmipserverId String
    an identifier for the resource with format {{name}}.
    passwords List<String>
    Password to use for connectivity to the KMIP server.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serverIdentityCheck String
    Enable/disable KMIP server identity check (verify server FQDN/IP address against the server certificate). Valid values: disable, enable.
    serverLists List<Property Map>
    Server-List. The structure of server_list block is documented below.
    sourceIp String
    FortiGate IP address to be used for communication with the KMIP server.
    sslMinProtoVersion String
    Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting). Valid values: default, TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3.
    username String
    User name to use for connectivity to the KMIP server.
    vrfSelect Number
    VRF ID used for connection to server.

    Supporting Types

    ObjectVpnKmipserverServerList, ObjectVpnKmipserverServerListArgs

    Certs List<string>
    Client certificate to use for connectivity to the KMIP server.
    Id double
    ID
    Port double
    KMIP server port.
    Server string
    KMIP server FQDN or IP address.
    Status string
    Enable/disable KMIP server. Valid values: disable, enable.
    Certs []string
    Client certificate to use for connectivity to the KMIP server.
    Id float64
    ID
    Port float64
    KMIP server port.
    Server string
    KMIP server FQDN or IP address.
    Status string
    Enable/disable KMIP server. Valid values: disable, enable.
    certs List<String>
    Client certificate to use for connectivity to the KMIP server.
    id Double
    ID
    port Double
    KMIP server port.
    server String
    KMIP server FQDN or IP address.
    status String
    Enable/disable KMIP server. Valid values: disable, enable.
    certs string[]
    Client certificate to use for connectivity to the KMIP server.
    id number
    ID
    port number
    KMIP server port.
    server string
    KMIP server FQDN or IP address.
    status string
    Enable/disable KMIP server. Valid values: disable, enable.
    certs Sequence[str]
    Client certificate to use for connectivity to the KMIP server.
    id float
    ID
    port float
    KMIP server port.
    server str
    KMIP server FQDN or IP address.
    status str
    Enable/disable KMIP server. Valid values: disable, enable.
    certs List<String>
    Client certificate to use for connectivity to the KMIP server.
    id Number
    ID
    port Number
    KMIP server port.
    server String
    KMIP server FQDN or IP address.
    status String
    Enable/disable KMIP server. Valid values: disable, enable.

    Import

    ObjectVpn KmipServer can be imported using any of these accepted formats:

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectVpnKmipserver:ObjectVpnKmipserver labelname {{name}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager logo
    fortimanager 1.15.0 published on Thursday, Nov 13, 2025 by fortinetdev
    Schema (JSON)
    fortinetdev/terraform-provider-fortimanager
      Meet Neo: Your AI Platform Teammate