You can register a key management server to be used for data encryption. By linking with a key management server, you can manage encryption keys more securely.
Important: When specifying the timeout
period, the retry interval, and the number of retries, specify the values so that
the value calculated by the following formula is 9120 seconds (152 minutes) or less.
This limitation applies only for data at rest encryption.
Timeout-period (seconds) + (retry-interval (seconds) + timeout-period (seconds)) * number-of-retries
Note:
- For data at rest encryption, the supported number of Key Management Servers depends on system configuration.
- For data inflight encryption:
- At least two Key Management Servers should be configured
- Multiple Key Management Servers can be configured for redundancy
-
Navigate to the key management server settings based on the type of
encryption:
- Data at Rest Encryption: From the navigation tree, select .
- Data Inflight Encryption: From the navigation tree, select .
- Click Register Key Management Server.
- Specify the required information and register the key management server.