Brocade Network Advisor SAN User Manual v11.1x (53-1002167-01, May 2011)

Brocade Network Advisor SAN User Manual 477
53-1002167-01
Creating a new encryption group
18
9. Select the Key Vault Type. Configuration options vary based on the key vault type you choose.
To complete the wizard steps, proceed to the section that describes your particular key vault
type. Key vault types are:
- RSA Key Manager (RKM). For RKM key vault setting instructions, see “Configuring key
vault settings for RSA Key Manager (RKM)” on page 477.
- NetApp Link Key Manager (LKM). For LKM key vault setting instructions, see “Configuring
key vault settings for NetApp Link Key Manager (LKM)” on page 482.
- HP Secure Key Manager (SKM). For SKM key vault setting instructions, see “Configuring
key vault settings for HP Secure Key Manager (SKM)” on page 487.
- Thales Encryption Manager for Storage (TEMS). For TEMS key vault setting instructions,
see “Configuring key vault settings for Thales Key Manager (TEMS)” on page 492.
- Tivoli Key Lifetime Manager (TKLM). For TKLM key vault setting instructions, see
“Configuring key vault settings for IBM Tivoli Key Lifetime Manager (TKLM)” on page 497.
Configuring key vault settings for RSA Key Manager (RKM)
The following procedure assumes you have already configured the initial steps in the Configure
Switch Encryption wizard. If you have not already done so, go to “Creating a new encryption group”
on page 474.
Figure 180 shows the key vault selection dialog box for RKM.
FIGURE 180 Select Key Vault dialog box for RKM
1. Enter the IP address or host name for the primary key vault. If you are clustering RKM
appliances for high availability, IP load balancers are used to direct traffic to the appliances.
Use the IP address of the load balancer.
2. Enter the name of the file that holds the Primary Key Vault’s CA Key Certificate or browse to the
desired location.