Configuring The Connection Settings To The Key Management Server - Hitachi G1000 User Manual

Configuring the connection settings to the key management server

Configure the connection settings to the key management server to set up
the key management server and to back up the data encryption license keys
to the key management server.
For more information, see
Settings window on page 3-6
server on page
To connect to the key management server by host name instead of IP
address, send the IP address of the DNS server to your service representative
and request that the service representative configure the SVP.
If the key management server is unavailable after you complete this task, the
settings may be incorrect. Contact the server or network administrator.
Prerequisites
• Required role: Security Administrator (View & Modify)
1 In Hitachi Command Suite:
.
a
.
b
.
In Device Manager - Storage Navigator :
a
.
b
.
2 Select the Encryption Keys tab.
.
3 Click Edit Encryption Environmental Settings.
.
4 In the Edit Encryption Environmental Settings window, select Enable
.
or Disable on the Key Management Server.
5 If you connect to the Key Management Server, specify the primary server
.
and the secondary server.
6 If the key management server is already in use, select Check to test the
.
connection. Error messages appear if the server configuration test fails.
7 Create an encryption key:
.
¢
Hitachi Virtual Storage Platform G1000 Encryption License Key User Guide
Settings in the Edit Encryption Environmental
4-4.
On the Resources tab, click Storage Systems, and then expand All
Storage Systems.
Expand the target storage system, and then select Encryption Keys.
Display the Device Manager - Storage Navigator main window.
Select Administration in Explorer, and select Encryption Keys.
To generate an encryption key on the key management server, select
Generate Encryption Keys on Key Management Server. To store
the encryption key on the key management server, select Protect
the Key Encryption Key on the Key Management Server, then I
Agree.
Caution: If you have selected Protect the Key Encryption Key on
the Key Management Server in Generate Encryption Keys on
Key Management Server, the storage system will try to get
encryption keys backed up on the key management server once the
storage system is turned on. Therefore, it is recommended that you
confirm that the SVP is connected to the key management server
properly before turning the storage system on.
Key Management Server Connections
and Backing up keys to a key management
3-5