Brocade Network Advisor SAN User Manual v11.1x (53-1002167-01, May 2011)

442 Brocade Network Advisor SAN User Manual

53-1002167-01

Supported encryption key manager appliances

As stated under “Network connections”, a supported key management appliance must be

connected on the same LAN as the management port of the encryption switches, or of the

Backbone Chassis Control Processors (CPs) in the case of the encryption blade.

Secure communication between encryption nodes in an encryption group, and between encryption

nodes and key manager appliances requires an exchange of certificates that are used for mutual

authentication. Each supported key manager appliance has unique requirements for setting up a

secure connection and exchanging certificates.

The following key manager appliances are supported:

• The RSA Key Manager (RKM)

• The NetApp Lifetime Key Manager (LKM)

• The HP StorageWorks Secure Key Manager (SKM)

• The Thales Encryption Manager for Storage (TEMS)

• The Tivoli Key Lifecycle Manager (TKLM)

Refer to the following topics for specific information:

• “Steps for connecting to an RKM appliance” on page 443.

• “Steps for connecting to an LKM appliance” on page 448.

• “Steps for connecting to an SKM appliance” on page 453.

• “Steps for connecting to a TEMS appliance” on page 464.

• “Steps for connecting to a TKLM appliance” on page 469.