Edit Encryption Environmental Settings confirmation window

Primary Server

Displays the primary server information.

• Key Management Server: Shows whether the key management server is used

  Enable: The key management server is used

  Disable: The key management server is not used

  Not Set: Initialize the encryption environmental settings

• Host Name: The host name of the key management server
• Port number: The port number of the key management server
• Timeout (sec.): The time until the connection attempt to the key management server times out
• Retry Interval (sec.): The interval to retry the connection to the key management server
• Number of Retries: The number of times to retry the connection to the key management server
• Client Certificate File Name: The client certificate file for connecting to the key management server
• Password: The password for the client certificate is displayed as ****** (six asterisks).
• Root Certificate File Name: The root certificate file for connecting to the key management server

Secondary Server

When the secondary server exists, the same items display as for the primary server.

Enable Encryption Key Regular Backup to Key Management Server

• Yes: An encryption key is being regularly backed up.
• No: An encryption key is not being regularly backed up.

Generate Encryption Keys on Key Management Server

Displays whether encryption keys are created on a key management server.

• Yes: Encryption keys are created on a key management server.
• No: Encryption keys are not created on a key management server.

Protect the Key Encryption Key at the Key Management Server

Displays whether key encryption keys are saved on key management servers.

• Yes: Encryption keys are created on a key management server.
• No: Encryption keys are not created on a key management server.

Delete Internal Encryption Keys at PS OFF

Indicates whether to save an encryption key to the key management server, and to delete the encryption key in the storage system when it is turned off:

Yes: Saves the encryption key in the key management server, and deletes the encryption key in the storage system when it is turned off.

No: The encryption key in the storage system is not deleted when it is turned off.

Disable local key generation

Displays whether encryption keys are created on key management servers and encryption keys cannot be created on the storage system

• Yes: Encryption keys are created on key management servers and encryption keys cannot be created on the storage system.
• No: Encryption keys are not created on key management servers. Encryption keys are created on storage systems.