Quick Reference Guide

Setting up Primary and Secondary EKM 3.0

Servers

This chapter describes how to install, use, and uninstall EKM 3.0 on the primary and secondary servers.

CAUTION: To prevent possible data loss due to an EKM 3.0 server failure, Dell recommends using a primary and

secondary EKM 3.0 server setup. This configuration provides redundancy in the event that the primary EKM 3.0

server is down or unavailable.

NOTE: You cannot have a primary EKM 3.0 and a secondary EKM 2.X server or vice versa.

Installing EKM 3.0 on the Primary Server

During the installation of EKM 3.0 on the primary server, you must select the option to save the installation profile. When

the installation of EKM 3.0 on the primary server is complete, copy the saved installation profile to a removable drive or a

server share. Refer to

Installing EKM 3.0.

Using EKM 3.0 on the Primary Server

The primary EKM 3.0 server is where you perform all tasks for the management of encryption keys. By default, the

primary EKM 3.0 server is set to Automatically accept all new device requests for communication. Refer to Configuring

EKM 3.0 to Accept Devices that Contact EKM 3.0 for Keys for details on how to view or configure this setting. Dell

recommends regularly backing up the primary EKM 3.0 server. Refer to Performing Backups and Restoring from a

Backup.

If the primary EKM 3.0 server must be replaced for any reason, install EKM 3.0 on a new physical server using the

installation profile from the original primary EKM 3.0 installation. Restore the new primary EKM 3.0 server with the latest

backup, then update all devices to communicate with the new primary EKM 3.0 server for their key requests. Refer to

your tape library's user's guide for details on how to change the IP address of the EKM 3.0 server used for key requests.

To locate the tape library's user guide, see the Documentation and Reference Materials section of the ReadThisFirst.txt

file on the EKM 3.0 installation media.

Installing EKM 3.0 on the Secondary Server

NOTE: Do not install EKM 3.0 on the secondary server until the primary server's EKM 3.0 installation is complete.

The system on which EKM 3.0 is installed as a secondary server must have the same version of the operating system

that is installed on the primary EKM 3.0 server. EKM 3.0 does not support mixed operating systems between the primary

and secondary servers.

Install EKM 3.0 on the secondary server using the procedures in Installing EKM 3.0. Use the installation profile that you

saved when you installed EKM 3.0 on the primary server. You must manually enter the same passwords you used when

you installed EKM 3.0 on the primary server.