Key Management Server

Select whether to use the key management server:

• Enable: (default) key management server is used
• Disable: key management server is not used

Server Setting

When you use the key management server, the following items display:

• Primary server
• Secondary server
• Server Configuration test

Primary Server

Specify the primary server information.

• Host Name: Enter the host name of the key management server. Identifier: Enter the host identifier. IPv4: Enter the host IPv4 address. IPv6: Enter the host IPv6 address.
• Port number: Enter the port number of the key management server. Values: 1 to 65535. Default: 5696.
• Timeout (sec.): Enter the time until the connection attempt to the key management server times out. Values: 1 to 999. Default: 60.
• Retry Interval (sec.): Enter the interval to retry the connection to the key management server. Values: 1 to 60. Default: 1.
• Number of Retries: Enter the number of times to retry the connection to the key management server. Values: 1 to 50. Default: 3.
• Client Certificate File Name: Select the client certificate file for connecting to the key management server. Click Browse and select the file.
• Browse: Select the client certificate file. The form of the client certificate is PKCS#12. For information about the client certificate file, contact the server or network administrator. The file name appears in the Client Certificate File Name field.
• Password: Enter the password for the client certificate.

  Character limits: 0 to 128.

  Valid characters: Numbers (0 to 9)

  Upper case: (A-Z)

  Lower case: (a-z)

  Symbols: ! # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~

• Root Certificate File Name: Select the root certificate file for connecting to the key management server. Click Browse and select the file.
• Browse: Select the root certificate file. The form of the client certificate is X.509. If you do not know about the root certificate file, contact the server administrator or the network administrator. The name of the selected file appears in the Root Certificate File Name field.

Secondary Server

When the secondary server is set to Enable, the same settings can be specified as the primary server.

Note: You must select Enable for Secondary Server before you can select Protect the Key Encryption Key at the Key Management Server or Disable local key generation.

Server Configuration Test

Select Check to start a server connection test for the key management server based on the specified settings.

Check

Start a server connection test for the key management server based on the specified settings

Result

Shows the result of the server connection test for the key management server

Generate Encryption Keys on Key Management Server

Checks when encryption keys are created on a key management server

Protect the Key Encryption Key at the Key Management Server

Specifies when key encryption keys are saved on key management servers. If Warning is displayed, confirm the content of the warning, and select I Agree.

Note: This item cannot be selected if Disable is selected for Secondary Server.

Note: This item cannot be selected if Disable is selected for Secondary Server.

• User Name Enter the user name of the regular backup user.
• Password Enter the password of the regular backup user.

Disable local key generation

Specifies when encryption keys are created on the key management server and that encryption keys cannot be created on the storage system. If Warning is displayed, confirm the content of the warning, and select I Agree.

Caution: If you select this option and select I Agree when prompted, you will not be able to undo this action or restore the settings.

Note: This item cannot be selected if Disable is selected for Secondary Server.

Initialize Encryption Environmental Settings

Select to initialize the encryption environmental settings