Enabling KMIP-based encryption | HP Enterprise Secure Key Manager

Configuring access to the key servers

Configure the KMIP servers in the KMIP Server Configuration pane of the Configuration: Security page. You can configure a cluster of up to six KMIP servers. The autoloader or library will automatically use a different configured KMIP server if a connection fails.

Enter the hostname or IPv4 address of a KMIP server in the Server X IP/Hostname field. The Port must be 5696 unless the KMIP server is already configured to use a different port. Click Submit Query.

Enabling KMIP-based encryption

Enable KMIP-based encryption from the KMIP Encryption Configuration pane of the Configuration: Security page. If the library is partitioned into multiple logical libraries, encryption can be enabled for one or more logical libraries or partitions.

Configuring the KMIP feature for the 1/8 G2 Tape Autoloader and other MSL Tape Libraries 21

Image 21

HP Enterprise Secure Key Manager manual Configuring access to the key servers, Enabling KMIP-based encryption

Contents

Abstract Warranty Contents Using an encryption key server IntroductionHP Enterprise Secure Key Manager Eskm Media compatibility for drives supporting encryption Considerations for using an encryption key serverLicensing KMIP-based key servers MSL6480 Installing the encryption license HP Enterprise Secure Key Manager Eskm integration Using the Eskm Wizard HP Enterprise Secure Key Manager Eskm integration Page HP Enterprise Secure Key Manager Eskm integration Page KMIP-based key server integration Creating the client user name and password on the server Configuring the Kmip feature for the MSL6480 Using the Kmip Wizard Configuring the Kmip feature for the MSL6480 KMIP-based key server integration Enrolling the autoloader or library with a Kmip server Set or enter the Kmip security password Generating the client certificate request Entering the Kmip client credentials Signing the client certificate on the server Installing the signed client certificate ---END Certificate Enabling KMIP-based encryption Configuring access to the key servers KMIP-based key server integration MSL6480 Connectivity test Autoloader and other MSL libraries Failover test Basic encryption testPage Support and other resources Contacting HPTypographic conventions Documentation feedback