Nonstop Volume Level Encryption Guide

“8. Register the CLIMs” (page 42)
“9. Verify connection between the CLIM and the key managers” (page 43)
“10. Back up the configuration files” (page 43)
“11. Back up the Key Managers” (page 43)
Moving an ESKM device and its license to another system
Licensing on the NonStop system is done on a per-system basis. However, the license on the ESKM
depends on the number of CLIMs. If you move Volume Level Encryption from one system to another,
for instance from a development system to a production system, you may not have enough ESKM
licenses for the CLIMs.
Suppose you install encryption on a system. You register the CLIMs on that system with available
licenses on the ESKM (each CLIM/ESKM user pair uses one license.) Later, you want to install
encryption on a different system, and move the Volume Level Encryption solution and its license to
that system. In order to have enough ESKM licenses for the new CLIMs/ESKM users, you must get
rid of the CLIM/ESKM user pairs on the ESKM for the original system, then create users on the
new one.
You cannot delete a user that owns keys. You must first delete all keys that belong to that user or
transfer them to another user. Once you have transferred or deleted all the keys owned by that
user, delete the user. Then the ESKM license is available again.
CAUTION: HP recommends that you change the ownership of each key instead of deleting them,
because if you delete a key you still need, or if you delete the wrong key, that data is permanently
lost. Delete keys only if you are absolutely sure that you do not need them, and exercise caution
to delete the right key.
Follow this procedure:
1. Determine the user that you need to move to another system.
2. Determine the keys owned by that user.
3. Change the ownership of each key, or if you are sure you do not need a key, delete it.
4. Once the user does not own any keys, delete the user.
For information about key ownership and user management, see the Enterprise Secure Key Manager
Users Guide.
14 Installation