13.You can confirm that encryption is enabled, and verify which key providers are in use, by
going to Settings → Security → Encryption, as shown in Figure 13-51. Note four green
check marks confirming that the master access key is available on all four SKLM servers.
Figure 13-51 Encryption enabled with two key providers available
13.5 Configuring additional providers
When the system is configured with a single encryption key provider, it is possible to add a
second provider.
Note: If you set up encryption of your storage system when it was running IBM Spectrum
Virtualize code version earlier than V7.8.0, then when you upgrade to code version V8.1
you have to rekey the master encryption key before you can enable second encryption
provider.
13.5.1 Adding SKLM as a second provider
If the storage system is configured with the USB flash drive provider, it is possible to configure
SKLM server(s) as a second provider. To enable SKLM server(s) as a second provider, follow
these steps:
1. Go to Settings → Security → Encryption, expand the Key Servers section and click
Enable, as shown in Figure 13-52. Note that to enable key server as a second provider,
the system has to detect at least one USB flash drive with a current copy of the master
access key.
Figure 13-52 Enable SKLM server as a second provider
780
Implementing the IBM Storwize V5000 Gen2 with IBM Spectrum Virtualize V8.1