Quantum Scalar i6000, User Manual

Page: 318 / 738

Chapter 8: Encryption Key Management
Setting up EKM on the Scalar i6000
300 Quantum Scalar i6000 User’s Guide
Note: The .p12 format combines the public/private key pair files
in .pem file format and password protects access to such
.pem certificate files.
• The Admin and Client certificates must be 1024 bits.
• The Admin and Client certificates must be signed by the Root
Certificate.
• Certificates must have the Organization name (O) set in their Issuer
and Subject info.
• The Admin certificate must have its Organizational Unit name (OU)
set as “akm_admin” in its Subject Info. (Only applies to SKM).
• The same Root Certificate must be installed on the encryption key
servers and the library.
• All the certificates must have a valid validity period according to the
date and time settings on the encryption key server.
Follow the steps below to install your own certificates.
1 Place the certificate files in an accessible location on your computer.
2 From the Tools menu, select EKM Management > Import
Communication Certificates. The Communication Certificate
Import dialog box appears.