Link Keys tab
Connections between a switch and an NetApp LKM key vault require a shared link key. Link keys
are used only with LKM key vaults. They are used to protect data encryption keys in transit to and
from the key vault. There is a separate link key for each key vault for each switch. The link keys are
configured for a switch but are stored in the encryption engines, and all the encryption engines in a
group share the same link keys. The Link Keys tab displays a table that shows link key status for
each switch in an encryption group.
You must create link keys under the following circumstances:
•
•
•
•
•
Refer to
Establish buttons are used in establishing the trusted link between a switch and LKM.
Tape Pools tab
Tape pools are managed from the Tape Pools tab.
Figure 263
FIGURE 263
•
•
DCFM Enterprise User Manual
53-1001775-01
When a new encryption group is created.
When a new switch is added to an encryption group.
When a new key vault is added to an encryption group.
After all encryption engines in a switch have been zeroized.
When all of the encryption blades have been removed from a director and one or more new
encryption blades have been added.
"Establishing the trusted link"
displays the tape pools tab.
Encryption Group Properties - Tape Pools tab
If you want to remove a tape pool, select one or more tape pools in the list and click Remove.
To modify the tape pool, remove the entry and add a new tape pool. See
page 586 for more information.
on page 508 for information on how the Accept and
20
Link Keys tab
"Adding tape pools"
on
585