Brocade Network Advisor SAN User Manual v12.0.0 (53-1002696-01, April 2013)

Brocade Network Advisor SAN User Manual 543
53-1002696-01
Supported encryption key manager appliances
20
The following key vault types are supported:
RSA Data Protection Manager (DPM): If an encryption group contains mixed firmware nodes,
the Encryption Group Properties Key Vault Type name is based on the firmware version of the
group leader. For example, If a switch is running Fabric OS 7.1.0 or later, the Key Vault Type is
displayed as “RSA Data Protection Manager (DPM).”If a switch is running a Fabric OS version
prior to v7.1.0, Key Vault Type is displayed as “RSA Key Manager (RKM)”.
NetApp Lifetime Key Manager (LKM): The NetApp Key Vault Type name is shown as NetApp
Lifetime Key Manager (LKM) for both NetApp Lifetime Key Manager (LKM) and SafeNet
KeySecure for Key Management (SSKM) Key Vault Types.
HP Secure Key Manager (SKM): The HP Key Vault Type name is shown as HP Secure Key
Manager (SKM) for both SKM and Enterprise Secure Key Management (ESKM) Key Vault
Types.
Thales e-Security keyAuthority (TEKA): If an encryption group contains mixed firmware nodes,
the Encryption Group Properties Key Vault Type name is based on the firmware version of the
group leader. For example, If a switch is running Fabric OS 7.1.0 or later, the Key Vault Type is
displayed as “Thales e-Security keyAuthority (TEKA).”If a switch is running a Fabric OS version
prior to v7.1.0, Key Vault Type is displayed as “Thales Key Manager (TEMS)”.
Tivoli Key Lifetime Manager (TKLM) Key
Key Management Interoperability Protocol (KMIP): Any KMIP-compliant server can be
registered as a key vault on the Fabric OS encryption switch after setting the key vault type to
KMIP.
Currently, only KMIP with SafeNet KeySecure for key management (SSKM) native hosting LKM
is supported.
Refer to the following topics for specific information:
“Steps for connecting to a DPM appliance” on page 544
“Steps for connecting to an LKM/SSKM appliance” on page 549
“Steps for connecting to an ESKM/SKM appliance” on page 554
“Steps for connecting to a TEKA appliance” on page 565
“Steps for connecting to a TKLM appliance” on page 570
“Steps for connecting to a KMIP appliance (SafeNet KeySecure)” on page 574