Quantum Scalar i6000, Руководство пользователя

Страница: 322 / 738

Chapter 8: Encryption Key Management
Setting up EKM on the Scalar i6000
304 Quantum Scalar i6000 User’s Guide
g EKM Path Diagnostics - Not supported for Q-EKM. The Test
button is disabled.
TKLM/SKLM
a Enable SSL - Check the box if SSL communications should be
enabled between the library and encryption server(s).
b Primary EKM Server -Type the IP address or DNS name of the
primary TKLM/SKLM server.
c Primary port number - If SSL is enabled, the default port
number is 443. If SSL is not enabled, the default port number is
3801. You can change the port number on the library, but, if
you do, you must also change the port number on the key
server to match or TKLM/SKLM will not work properly.
d Secondary EKM Server - Type the IP address or DNS name of
the optional secondary TKLM/SKLM server. If you do not plan to
use a secondary server, you may type a zero IP address, 0.0.0.0,
into the Secondary EKM Server text box, or you may leave this
text box blank.
e Secondary port number - If SSL is enabled, the default port
number is 443. If SSL is not enabled, the default port number is
3801. If you are using a secondary key server, then the port
numbers for both the primary and secondary key servers must
be set to the same value. If they are not, synchronization and
failover will not occur.
f Key Class - This field is not applicable for TKLM/SKLM.
g EKM Path Diagnostics - This Test button not supported, and
therefore disabled.
SKM
a Enable SSL - Check box is checked automatically and field is
disabled.
b Primary EKM Server - Type the IP address or DNS name of the
primary SKM server.
c Primary port number - Field is disabled, and port number
defaults to 6000 automatically.
d Secondary EKM Server - Type the IP address or DNS name of
the secondary SKM server.