Dell PowerVault TL4000 Dell PowerVault ML6000 Encryption Key Manager User's - Page 36

Interrupting the Encryption Key Manager GUI during key generation, do not change, keytool - user password

Page 36 highlights

3. On the "EKM Server Configuration" page (Figure 3-4) enter the data in all required fields (indicated by an asterisk *). Some fields are filled in for your convenience. Click on the question mark to the right of any data field for a description. Click Next. Note: Once you have set the keystore password, do not change it unless its security has been breached. The passwords are obfuscated to eliminate any security exposure. Changing the keystore password requires that every password in that keystore be changed individually using the keytool command. See "Changing Keystore Passwords" on page 3-12. Figure 3-4. EKM Server Configuration Page Although the number of keys that can be generated for the Dell Encryption Key Manager keystore has no limit, the time required to generate keys will increase depending the number of keys requested. The Encryption Key Manager takes 15 seconds to generate 10 keys, and takes over 30 minutes to generate 10000 keys. Please note the number of keys is limited by the host server resources (memory in the server). The Encryption Key Manager application maintains the keystore list in system memory while running in order to have quick access to the keys when the library sends a key request from the drive. Note: Interrupting the Encryption Key Manager GUI during key generation requires an Encryption Key Manager re-install. 3-6 Dell Encryption Key Mgr User's Guide a14m0247

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122

3.
On the “EKM Server Configuration” page (Figure 3-4) enter the data in all
required fields (indicated by an asterisk *). Some fields are filled in for your
convenience. Click on the question mark to the right of any data field for a
description. Click
Next
.
Note:
Once you have set the keystore password,
do not change
it unless its
security has been breached. The passwords are obfuscated to eliminate
any security exposure. Changing the keystore password requires that
every password in that keystore be changed individually using the
keytool
command. See “Changing Keystore Passwords” on page 3-12.
Although the number of keys that can be generated for the Dell Encryption
Key Manager keystore has no limit, the time required to generate keys will
increase depending the number of keys requested. The Encryption Key
Manager takes 15 seconds to generate 10 keys, and takes over 30 minutes to
generate 10000 keys. Please note the number of keys is limited by the host
server resources (memory in the server). The Encryption Key Manager
application maintains the keystore list in system memory while running in
order to have quick access to the keys when the library sends a key request
from the drive.
Note:
Interrupting the Encryption Key Manager GUI during key generation
requires an Encryption Key Manager re-install.
a14m0247
Figure 3-4. EKM Server Configuration Page
3-6
Dell Encryption Key Mgr User's Guide