IBM Midrange System DS4000 Series Hardware Manual page 286

When the process is complete, the key is created and located as specified; also, as shown in
Figure 5-8, the security identifier is displayed. There are three items that must be kept secure
in order to manage any changes to the FDE drives when they are encryption enabled.
Security key file created from the process
Security key identifier created from the process
Password used
Figure 5-8 Security key creation process complete
The key authorizations now generated are synchronized between both controllers in the
DS5000 storage subsystem. With these authorizations in place, arrays on the FDE drives in
the storage subsystem can be secured.
268
IBM Midrange System Storage Hardware Guide