Quantum scalar i40 User Manual page 221

Quantum Scalar i40 and Scalar i80 User's Guide
• Certificates must have the Organization name (O) set in the Issuer
and Subject information.
• The Admin certificate must have its Organizational Unit name (OU)
set as "akm_admin" in its Subject Information.
• The same Root certificate must be installed on the SKM servers and
the library.
• All the certificates have a valid validity period, according to the
library's date and time settings.
To Install Your Own Certificates:
1 Ensure that the date on both SKM servers and the library are set to
the current date. Incorrect date settings may interfere with the TLS
certificates and cause the library to stop communicating with the
SKM servers.
2 Place the TLS certificate files in a known location on your computer.
3 From the Tools menu, select EKM Management > Import
Communication Certificates.
The Tools - EKM Communication Certificate Import screen opens
(see Figure 36 on page 198).
At the top of the page, the primary and secondary key server status
is displayed. If the status is "Not Available," it means there is no
communication with the server. The most likely causes are that the
server is down, not connected, or not configured correctly on the
library; or that no TLS certificates are installed or the TLS certificates
are invalid or expired. At the bottom of the page, a message
indicates whether TLS certificates are currently installed. If
certificates are installed, a table appears below the message
containing information about the installed certificates.
4 From the Select the Certificate Type to install drop-down list,
select your encryption key management system (SKM or KMIP Key
Manager).
5 Retrieve the certificate files as follows:
For SKM:
a Make sure the Use the Quantum Certificate Bundle check box
is deselected.
b Click Browse to retrieve the Root Certificate File.
Chapter 7: Encryption Key Management
Installing TLS Certificates on the Library
195