18
•
•
•
15. Click Next.
16. Click Finish to exit the Configure Switch Encryption wizard.
498
Create a new master key
The Management application checks for a new master key. New master keys are generated
from the Encryption Group Properties dialog box, Security tab. See
key"
on page 531 for more information.
Save the switch's public key certificate to a file
The Management application saves the KAC certificate into the specified file.
Back up the master key to a file
The Management application saves the master key into the specified file. Note that a master
key is not generated if the key vault type is LKM. LKM manages DEK exchanges through a
trusted link, and the LKM appliance uses its own master key to encrypt DEKs.
The Read Instructions dialog box displays instructions for installing public key certificates for
the encryption switch. These instructions are specific to the key vault type. Copy or print these
instructions.
At this point, a Next Steps dialog box is displayed, with brief instructions that are specific to
certificate exchanges between the switch and key manager you are using.
"Creating a new master
DCFM Professional Plus User Manual
53-1001774-01