You can import to the storage system a certificate required for communications with the key management server.
To use the key management server, you need to import a client certificate and a
root certificate to the storage system. For details about how to obtain the
certificates, see:
- Encryption License Key User Guide for data at rest encryption.
- Provisioning Guide for Mainframe Systems for data inflight encryption.
You can import up to 16 client certificates and up to 16 root certificates.
- Prepare a client certificate file or a root certificate file registered in the key management server.
- Obtain the following:
- The type of the certificate file
- The name of the certificate
- The password for the certificate file
- The certificate file to upload
- You must have the Security Administrator (View & Modify) role.
-
Navigate to the key management server settings based on the type of
encryption:
- Data at Rest Encryption: From the navigation tree, select .
- Data in Flight Encryption: From the navigation tree, select .
- Select the Key Management Server Certificates tab, and then go to the screen for the key management server certificates.
- Click Import Key Management Server Certificate.
- Specify the required information and import the certificate for connecting to the key management server.